Earlier quoted context omitted.
Props for sharing what's probably a ubiquitously hated opinion on HN. Here are two of my own, just to join in: 1. Social credit score system. We should all be able to point our phone at antisocial behavior and damage their score. Until then there's pretty much zero recourse against people who have hostile social behaviors that don't commit a crime (like arguing with the McDonalds employee or causing a scene when some…
All shown in https://en.wikipedia.org/wiki/Nosedive_(Black_Mirror)
Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
41–46 of 46 posts
Re: Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
#42Honestly I just want government backed digital ID for this stuff. I know the concerns. I no longer care. The benefits outweight the costs, imho. I want to be able to tell a site "yes I'm Martin here's proof either ban me or let me in but stop making me jump through hoops to prove ID. And so that social sites I use will no longer have to deal with undesired non-unique accounts for bot swarms and sockpuppets and the li…
Props for sharing what's probably a ubiquitously hated opinion on HN. Here are two of my own, just to join in: 1. Social credit score system. We should all be able to point our phone at antisocial behavior and damage their score. Until then there's pretty much zero recourse against people who have hostile social behaviors that don't commit a crime (like arguing with the McDonalds employee or causing a scene when some…
> 1. Social credit score system. We should all be able to point our phone at antisocial behavior and damage their score. Until then there's pretty much zero recourse against people who have hostile social behaviors that don't commit a crime (like arguing with the McDonalds employee or causing a scene when someone asks them to turn down their music on the bus). People hate on "Karens" but they're actually our last remaining line of defense against these people.
I don't think you'll actually want to live in a society that works like this. It's called a panopticon. Like some experimental prisons or the DDR which was basically a nation-prison. Everyone will be living a fake life trying to look good while hiding their real wants and needs. This is not natural for people.
And those things are not crimes for a reason. We can't possibly criminalise every little thing that might annoy someone. Some people are jerks or have a bad day, yes. That's no reason to obliterate the concept of privacy.
Also, something that annoys some people will be loved by others. Opinions are like assholes. Everyone's got one.
> As soon as you get on a public road, the government should have dystopian-level control over your car. You can't speed. You can't run a red light (or it will be video recorded and you'll be insta-billed). When there's a wreck, the camera feed in all nearby vehicles is auto-uploaded to the net so all parties can see what happened, no fuss. Break the rules a few times? That's fine, you get your government issued tiny zip car for a year and we'll see if you can respect the shared roads after that. And, of course, alcohol breath analysis to drive
Just get the self driving cars already. Then there is no more need for traffic policing. And we can just spend our time in the car as we wish. No need to go all Draconian and from a tech difficulty point of view it's similarly heavy.
Re: Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
#43Earlier quoted context omitted.
What I'm scared of is some sort of cryptography becoming the death of the open web. Baking keys into your hardware and doing remote attestation. It doesn't tie you to a real-world identity except that you're locked into using an unrooted (DRM'd) device for using online services like a normal person If I had to choose between two evils, I'd rather upload my passport to cloudflare and be able to get anonymous tokens fr…
> If I had to choose between two evils, I'd rather upload my passport to cloudflare and be able to get anonymous tokens from their API (RSA blind signatures or whatever) to prove I'm a real person and browse the web with Firefox and no closed source components, than be forced into hardware attestation and a locked-down device. I don't want to do either. Not interested in Altman's eyeball crap either. Bot prevention i…
I mean, yeah, obviously nobody wants either, but
> Bot prevention is not my problem as a user anyway
It isn't until it is. Today already one needs to
- "hold this button for 5 seconds to access this website" (and if you let go in between it offers the same captcha but will deny access until you reload the page and do what they ask), e.g. phys.org article I accessed iirc from HN
- Select all mountains or whatever, many forms on many many websites
- Rotate this puzzle piece until it fits (Chinese video website where someone linked to from YouTube because the randomly selected Chinese recipient of a gift posted their reaction there)
- Add up the dice from these 15 pictures and select the matching die (github registration)
- "Your IP address doesn't have access. Request ID 929cjn289w." various websites
- "Something went wrong" -> open the developer tools -> server says IP address blocked. Retry with a different user agent string succeeds. (German eBay)
- Can access something from popular browsers but not then grab it with curl because they block that user agent (I needed this because my Android "download manager" was broken. Why the browser can't download it by itself like on any other OS, I don't know, but so I need to do downloads with wget/curl/whatever and this is very often blocked by user agent string)
- Verify your phone number to prove you're not a bot (Microsoft, Google, German eBay, Telegram, you name it)
But it's not your issue as a user! :P
More seriously, this is why I'm bringing this up now before the choice is already made, things magically work for the 99% using crypto solutions like proposed in the submission and the freedom to run free software is even more impaired than it already is today (ask anyone who runs a custom ROM or something as heinous as rooted their device but would still like to use payments or get updates for their device like a normal person)
Re: Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
#44Earlier quoted context omitted.
What I'm scared of is some sort of cryptography becoming the death of the open web. Baking keys into your hardware and doing remote attestation. It doesn't tie you to a real-world identity except that you're locked into using an unrooted (DRM'd) device for using online services like a normal person If I had to choose between two evils, I'd rather upload my passport to cloudflare and be able to get anonymous tokens fr…
> If I had to choose between two evils, I'd rather upload my passport to cloudflare and be able to get anonymous tokens from their API (RSA blind signatures or whatever) to prove I'm a real person and browse the web with Firefox and no closed source components, than be forced into hardware attestation and a locked-down device. I don't want to do either. Not interested in Altman's eyeball crap either. Bot prevention i…
[dead]
Re: Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
#45Earlier quoted context omitted.
What about for software implementations like 1Password and Bitwarden?
They can't fake the attestation from hardware implementations so you could just reject keys from software implementations.
Wouldn't companies/bots/etc. still just get around this by buying many such hardware devices and automating their usage instead?
Re: Show HN: Replace CAPTCHAs with WebAuthn passkeys for bot prevention
#46Earlier quoted context omitted.
Props for sharing what's probably a ubiquitously hated opinion on HN. Here are two of my own, just to join in: 1. Social credit score system. We should all be able to point our phone at antisocial behavior and damage their score. Until then there's pretty much zero recourse against people who have hostile social behaviors that don't commit a crime (like arguing with the McDonalds employee or causing a scene when some…
> 1. Social credit score system. We should all be able to point our phone at antisocial behavior and damage their score. Until then there's pretty much zero recourse against people who have hostile social behaviors that don't commit a crime (like arguing with the McDonalds employee or causing a scene when someone asks them to turn down their music on the bus). People hate on "Karens" but they're actually our last rem…
> I don't think you'll actually want to live in a society that works like this
If you don't have social credit or some other kind of consequences... then people will continue to abuse things because there is no guilt/shame/fear for their actions. But if you DO have it, then as you say it leads to a fake and unnatural way of living.
Perhaps the answer is somewhere in the middle?