131–140 of 222 posts
(ACQ Bure is a SPAC.)
Interesting that Yubico is choosing to go public via SPAC. It’s lower scrutiny, it became more popular over the last few years, and then lost some popularity because of high profile duds. Why go with a SPAC in that environment if the business is healthy and profitable?
I have an irrational concern about using security products from a company post-merger or acquisition. It has never ended well for me as an anecdotal user. Going public is taking that worry even further. Make keys, sell keys. The end. What's there to raise funding for? Build yet another password vault?
This is not really a merger because the other company is a “blank check” holding company (a.k.a. SPAC). It has no operations, it just holds a bunch of money put in by investors who want to find a private company that wants to go public.
Earlier quoted context omitted.
I'm not sure what your argument is. Sophisticated investors don't invest in obvious scams. That's tautologically true. Does that mean we should just watch and do nothing while people get scammed? The thing is, nobody is born sophisticated and there are many ways to get hurt in financial markets in the absence of scams even if you're intelligent and do your homework. You mention index trackers, but they are no silver…
You can buy a 2x levered daily vix ETF. You can buy 0dte options. You can buy options on the aforementioned ETF. You can go to a casino and put all your money on the roulette wheel. What is so risky about spacs that they need special attention?
The questions are rhetorical. Companies will rob their shareholders blind if you let them. You can't just be "lol caveat emptor".
(Casinos also cheated players shamelessly in the good old days before regulatory oversight.)
Earlier quoted context omitted.
> Cross key syncing service. Can’t work with FIDO/U2F, I’m afraid. The protocol works a little differently than most people expect, which is what allows the hardware token to “store” an unlimited number of auth credentials. What really happens at auth time is that the server (the one you are trying to authenticate to) sends a crypto package including the challenge and a key used to sign the challenge to the token. (T…
Does anything prevent copying the token's private key to another token right now?
Earlier quoted context omitted.
> Cross key syncing service. Can’t work with FIDO/U2F, I’m afraid. The protocol works a little differently than most people expect, which is what allows the hardware token to “store” an unlimited number of auth credentials. What really happens at auth time is that the server (the one you are trying to authenticate to) sends a crypto package including the challenge and a key used to sign the challenge to the token. (T…
Does anything prevent copying the token's private key to another token right now?
In general cmvp compatible modules do sometimes allow keys to be exported but only if wrapped, i.e. encrypted to prevent unauthorized disclosure. However this is also explicitly forbidden in other standards, such as qualified signing in Europe (etsi-...)- keys are generated on device and never leave.
What do you do if you lose the token? Ideally you enroll two or three and just use another.
I really hope this does not affect their current mode of operation. The reason I bought my Yubikeys in the first place were the one off purchase cost and the promise that the keys would do their job without me having to interact with Yubico from that point onwards. This has worked great so far! Now with shareholders in the mix I fear they will try to find recurring income models to increase profits. I guess we'll jus…
As somebody who just bought some keys last week for the same exact reasons, I share the same exact concerns. Why this need to always make more and more money? Do one thing, do it right, keep your customers happy, get your money, enjoy your life...
Earlier quoted context omitted.
You can buy a 2x levered daily vix ETF. You can buy 0dte options. You can buy options on the aforementioned ETF. You can go to a casino and put all your money on the roulette wheel. What is so risky about spacs that they need special attention?
Should publicly listed companies should publish their financial results every quarter? Do they have to use GAAP or can they make up their own financial metrics? What do you think would happen if we removed the regulations surrounding financial disclosure for public companies? The questions are rhetorical. Companies will rob their shareholders blind if you let them. You can't just be "lol caveat emptor". (Casinos also…
But, I'm really not getting your point here. SPACs have to report financial results just like any other public company. They aren't allowed to commit fraud any more than any other company.
I have an irrational concern about using security products from a company post-merger or acquisition. It has never ended well for me as an anecdotal user. Going public is taking that worry even further. Make keys, sell keys. The end. What's there to raise funding for? Build yet another password vault?
I wouldn't call that an irrational concern, since it's in fact pretty rational. Stock market investors demonstrability do not value computer security over financial performance, and once they control a company, its focus will shift to their priorities.
Honestly, do any companies improve in the long term when going public? It seems like the business model is always to make short term profits and then slowly (or in some cases quickly) die about.
Lots of companies found greater success post-IPO. Apple, Google, Facebook, Microsoft (especially recently), Nintendo, Tesla, etc. The IPO is a statement to investors that the company believes it will grow bigger and seeks public market funds to accelerate growth. That doesn't always happen. Some companies and investors see the IPO as merely a liquidity event, which is the wrong perspective to take. SPACs were clearly…
Microsoft - Ruining Windows to extract more value from customers.
Facebook - hardly anything even needs to be said here.
Google - slowly getting worse and rotting away.
Tesla - I’m a bit neutral here. Tesla has its problems, but it’s not clear that they used it be amazing and now are just trying to extract money from users.
The biggest killer was the fact that Yubikey NFC is so awful. I worked with tech support repeatedly, even bought two new keys, and it almost never worked right.