201–210 of 234 posts
Earlier quoted context omitted.
Not on my switch or home entertainment system though.
The PS4 might be a pain (though I haven't tried the gesture typing feature), but the Switch has a touchscreen so there's no issue there.
Earlier quoted context omitted.
Your car connects to WiFi? Oh boy, the security implications...
Every tesla car has a sim card and data connection that is used to connect to a vpn that high enough level engineers can use to run ssh commands directly on every tesla car at once or even target certain ones. You know nothing john snow.
Earlier quoted context omitted.
Also, there's no need for 63 character passwords. You can get ~128 bits of entropy with around 22 alphanumeric characters.
On some devices it may be easier to enter a long password from a restricted character set than to enter a shorter password from a richer set. For example, I've seen TVs that allow using a numeric keypad on the remote for entering digits in text and password fields, and require use of a clumsy on-screen keyboard for entering letters or punctuation. The on-screen keyboard is navigated with the up/down/left/right/ENTER…
when we got new internet in our previous home i was forced to change our password that everyone had already set from previous use, because the new configuration interface didn't allow spaces. so i used underscores. then family visited and they had a tablet with a keyboard that didn't have underscores.
Earlier quoted context omitted.
For url only. Qrcode are for much more than url.
You either use URL or custom app to scan Qrcode. You can't encode arbitrary data and expect universal reader being able to interpret it. And URL is actually good way to store small amounts of data, because you can launch web app to handle it and it's compatible with any device.
Earlier quoted context omitted.
Because urls have letters & words in english that I can read and determine if the website is authentic You must have some super-human ability to read a computer's mind if you can grok the kind of urls that usually come in emails like https://tinyurl.com/uvc58uq
You can see what the tinyurl redirect destination URL is (value of Location response header) without also requesting that URL. Not with a typical browser configuration, but with curl or some hosted solution delivering this functionality. Of course, if the email actually has a unique URL per recipient, then doing this gives away the fact that you interacted with the email.
Earlier quoted context omitted.
Or when you setup a new apple computer, you have to enter the wifi password without being able to see what you type, without being sure it is the right casing, and if you are not in the US without being sure you are using the right keyboard layout in the first place (the is no opportunity to type something else in a clear text box before that step).
When a friend tried to connect to a new network on their MacBook, a second friend with an iPad got a pop-up that such-and-such was attempting to connect to their network, and if they wanted to share connection details. One click and they were in. Creepy, but convenient.
https://www.zdnet.com/article/apples-awdl-protocol-plagued-b...
Earlier quoted context omitted.
For comparison, my phone shows me the URL that the QR code decoded to, and prompts me to confirm that I want to browse to it
Remember bitly, AMP, CDNs? Also, as to something like a javascript exploit in a URL itself, QRs can hold a surprising amount of data, enough to max out most URL browser limits around 2,048 bytes.
This is functionally the same as hovering over links in emails, which is the context in which I made my comment.
Earlier quoted context omitted.
It's just a guest network... Who cares if my neighbors or people walking by can use it?
That depends on your legal jurisdiction and its ideas about liability.
An it's not like I'm publicly advertising :)
Earlier quoted context omitted.
Do you never click URLs in emails? Of course you do, when you're confident the sender is reputable. Parent was referencing trusted contexts: the default password printed on your wifi router, the bill a cashier just handed you for what you just bought, the legal papers you just signed, etc. The QR code just links the trusted document with trustworthy digital versions & extended content. I'm not worried a spammer is go…
> Do you never click URLs in emails? Of course you do, when you're confident the sender is reputable. Nope. I go to the sender's URL manually and look for what it is they sent an email about.
Earlier quoted context omitted.
It's just a guest network... Who cares if my neighbors or people walking by can use it?
Pretty sure you're somewhat responsible for your IP