Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)TR
trevor @lemmy.blahaj.zone

Hello, tone-policing genocide-defender and/or carnist 👋

Instead of being mad about words, maybe you should think about why the words bother you more than the injustice they describe.

Have a day!

Posts 1
Comments 195
Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication
  • Okay, so it's just like Yubikey-type stuff? I've thought about that before but it seems very risky - they recommend you get two and set both of them up so you have a backup, but that would require all websites to support that, right?

    Pretty much. I suppose that's a very real disadvantage to using physical passkeys. If you lose it, unless you have multiple passkeys configured, or have access to an account recovery method, you lose that account.

    But, like you mentioned, using Bitwarden would sidestep that issue, and they do support passkey emulation.

  • Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication
  • I'm not an expert, so this is an oversimplification, but:

    Passkeys are essentially like authenticating the same way you do via SSH, but with websites. The site will use a public key for your account. Your passkey holds the private key. That's it, as I understand it.

    The advantages are that your accounts secured by passkeys will be inherently more difficult to crack than even the most complex, random passwords and it can't be phished (if you're using a physical passkey).

    The disadvantage is that the standard is still being worked on, and bad actors (MS, Apple, Google, etc.) are eager and willing to sucker people in to using their vendor lock-in software implementations of them. If you want to avoid this, either use real, physical FIDO-capable hardware authentication keys, or use a FOSS password manager that is capable of emulating them.

  • Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication
  • This isn't inherent to passkeys or the standard that they use. This has to do with the configuration of the service being attacked and the fact that once you've achieved MiTM, the sky is the limit for what you can do.

    Passkeys use the same underlying protocol as hardware authentication keys (FIDO, not the YubiKey auth protocol) and should be roughly as secure and vulnerable as that type of MFA method.

  • What to know about Louisiana's new surgical castration law
  • It's a two-step process:

    1. Misuse the word "groomer" until it means "anyone that isn't strictly heterosexual" (while also taking away useful vocabulary to describe a real abuse tactic).
    2. Make cruel and unusual punishment legal for "groomers".

    Make no mistake: they want you dead. It's that simple.

  • Will anything dethrone the Steam Deck? Probably not -GamingonLinux
  • It's almost everything. You can play most games on Linux. You can't bolt-on the quality of life features that Valve has on Windows.

    There's a reason most Steam Deck users don't install Windows on it, even though you can.

  • 'You can't kill all of us': Kenya protesters vow to march again as authorities kill 22
  • You tankies are so funny. NATO countries are also authoritarian. The distinction between real leftists and tankies is that we're not playing team sports, so it's quite easy to admit when a country within the big bad boogieman that is NATO sucks.

    That still doesn't mean some countries aren't more authoritarian than others, but the move by authoritarian """leftists""" to erase the word "authoritarian" from acceptable parlance is hilarious, and simultaneously demonstrates what people mean when they call you that.

  • Proton VPN now available without creating an account (Android)
  • They're transitioning to a non-profit organization now. While non-profits have their own problems, and it doesn't make them exempt from enshittifying, it removes the profit incentive to do so.

    In other words: I'd give them a little more credibility when it comes to this sort of thing until they give us a reason not to. I'm hopeful that they can be a positive force in the industries that they are in.

  • Just Stop Oil: do radical protests turn the public away from a cause? Here’s the evidence
  • Reactionaries will always piss and moan about every kind of protest; "stupid stunts" or otherwise. Those are the people you don't listen to, because if they had it their way, there would be no protesting.

    The fact is that even their outrage draws attention to the issues and non-disruptive protests typically don't have anywhere near that level of notoriety.

    Edit: adding a sourced article that cites multiple studies on the matter.

  • Flatulent Cows And Pigs Will Now Be Taxed In Denmark
  • A step in a marginally better direction. Next step: ban animal agriculture.

    We need to solve the problem, not just tax it. Animal exploitation, while reason enough to ban it on its own, is also a primary driver in climate change and zoonotic diseases. If you want to solve either of those existential problems, banning animal agriculture must be a part of that strategy.

  • Does a docker image minimizer like this exist?

    I am looking for something that can take a Dockerfile, like the following as an input:

    --- ```Dockerfile FROM --platform=linux/amd64 debian:latest ENV DEBIAN_FRONTEND=noninteractive

    RUN apt update && apt install -y curl unzip libsecret-1-0 jq COPY entrypoint.sh . ENTRYPOINT [ "/entrypoint.sh" ] ``` ---

    And produce a a multi-stage Dockerfile where the last stage is built from scratch, with the dependencies for the script in the ENTRYPOINT (or CMD) copied over, like this:

    --- ```Dockerfile FROM --platform=linux/amd64 debian:latest as builder ENV DEBIAN_FRONTEND=noninteractive

    RUN apt update && apt install -y curl unzip libsecret-1-0 jq

    FROM --platform=linux/amd64 scratch as app SHELL ["/bin/bash"]

    the binaries executed in entrypoint.sh

    COPY --from=builder /bin/bash /bin/bash COPY --from=builder /usr/bin/curl /usr/bin/curl COPY --from=builder /usr/bin/jq /usr/bin/jq COPY --from=builder /usr/bin/sleep /usr/bin/sleep

    shared libraries of the binaries

    COPY --from=builder /lib/x86_64-linux-gnu/libjq.so.1 /lib/x86_64-linux-gnu/libjq.so.1 COPY --from=builder /lib/x86_64-linux-gnu/libcurl.so.4 /lib/x86_64-linux-gnu/libcurl.so.4 COPY --from=builder /lib/x86_64-linux-gnu/libz.so.1 /lib/x86_64-linux-gnu/libz.so.1

    ...a bunch of other shared libs...

    entrypoint

    COPY entrypoint.sh /entrypoint.sh

    ENTRYPOINT [ "/entrypoint.sh" ] ``` ---

    I've had pretty decent success creating images like this manually (using ldd to find the dependencies) based on this blog. To my knowledge, there's nothing out there that automates producing an image built from scratch, specifically. If something like this doesn't exist, I'm willing to build it myself.

    6