HNHacker News
TopNewBestAskShowJobs

coffe2mug

35 karma · joined August 18, 2023

submissionscomments
coffe2mug··on Chrome adopts what may be the best protection yet against account takeovers
Don't try to give oblique reasons.

You are not forced to use DSBC. You are not even forced to use Chrome.

Lots of people - lose accounts by installing malware. They don't care about giving info to Google. at the end, many already store passport data in Google Photos or drive.

You can still buy coreboot/libreboot based laptops.

coffe2mug··on Chrome adopts what may be the best protection yet against account takeovers
article poorly written (may be by AI).

> generate a key that’s stored in this fortress.

It refers to the private key that is resident inside SecureEnclave. (During manufacturing)

See further. Dont just read one or two lines.

“The attacker can’t steal the private key from the device because the TPM / Secure Enclave will not release it. That is the core protection here,” Scott Helme, a researcher and founder of Report URI who blogged about the new protections on Tuesday, told Ars. “The attacker can steal the cookie, but they can’t answer a DBSC challenge by signing it with the private key, which is still safe on your device.”

Read https://support.apple.com/en-gb/guide/security/sec59b0b31ff/...

coffe2mug··on Chrome adopts what may be the best protection yet against account takeovers
> If Chrome can write into TPM/Secure Enclave it's like the best fingerprinting ever?

Please. Hatred for tech is stupid.

Read the specs before commenting. Even any free AI would have told you better.

Chrome is not writing into TPM or secure enclave.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
Yes. If you are such a person then do it.
coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
With your logic nothing is unstealable. Go and watch film inception.

The main point is the average Joe it works seamless. And average Joe won't have to remember things.

Yes, it does. Not everyone wants to maintain password database.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
Incorrect. They break but they fix it.

People break their phones less often compared to telling them keep their keepassdatabase in sync across devices.

Even recently my friend fixed his iPhone XR (10 year old) 3rd party. Everything including passkeys work fine.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
Downloading and keeping safe local data is a bug for others
coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
Buy a new iPhone. Sign into it. Everything is now available.

That is the reason: for the average Joe not having exportable passkeys is good.

Average Joe doesn't have to do backup. It is all automatic.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
https://f-droid.org/packages/de.noisruker.openPasskeyAuth

Use this then totally offline

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
No one is convincing you need to use it. If it makes it makes other people's lives easy then ok
coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
A random app cannot eat your passkey. Platform authentication ensures more safety. I am not an expert but definitely it does use secure enclave in some ways(maybe decryption).

UX usability is far better. With password and 2FA you have at least 2 steps. Here

Open the app: device like phone or laptop just asks your fingerprint or facial and done.

That is a great benefit for average Joe. Some one trying to scam remotely cannot access the account. The 89 year old grandma will say - I just give fingerprint. Done.

Yes, it won't cover all situations. Like if there is sim swap or bank employee does fraud.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
No one is forcing you. You can continue to use passwordmanager.

We are talking about the rest the people that want convenience.

In a way that is the reason passkeys synced with Google or Apple just work. No need of hardware keys.

coffe2mug··on Passkeys were invented by engineers with zero understanding of consumer brain
Passkeys cannot be stolen. Yes, don't say that what if someone steals my iPhone, PIN, and adds their fingerprint.

Let's say eBay asks user to login. With passkey. Press and hold fingerprint etc. login done. Even with laptop.

And average Joe doesn't want to maintain a keepassdatabse sync it. Yes, you can always use your own server etc but others have life.

coffe2mug··on GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
Would be amazing if this was used to root so-far unrootable android devices. Any suggestions.
coffe2mug··on US Supreme Court Just Blew Up EU-US Data Transfers
Sadly nothing will change.

- Pretty sure a large number of politicians are using claude, chatGPT etc.

- Majority of researchers in EU are dependent of all of US SV companies. There are nothing equivalent. EVen if there is mistral or other open source llms - every damn Uni/company is uploading everything to claude or open AI or gemini.

- Majority see these but just move on

- 99% of EU politicians either dont care or show apathy or worse live in a moat

- Ideally EU could have forced iphone, Google to openup. They did not.

- Same with taxation. Ireland fights EU to give tax breaks

- Its f*king broken system

coffe2mug··on Microsoft Needs Windows Lite
- people complain but have no choice

- tolerance is too high

- Every sysadmin is quietly annoyed but knows it gives then $$$.

- Companies are never going to change anytime.

coffe2mug··on How Japan's railways stayed one while splitting apart
The locals value silence. It is not easy to put rails or roads. until recently people used to protest the noise of windmills (thats changing now).
coffe2mug··on Setting Up a New Windows Laptop in 2026
Despite lots of controversy I still either buy Chromebook or install chromeosFlex (without playstore) for some of my relatives. Just works.

ublock origin lite is OK for these folks that need laptop only for the rare situation to fillup some PDF, airline tickets or printout.

For love or hate, people already have Google account. One password to remember. And google syncs everything incl. password, even payments. So no more brain fatigue.

coffe2mug··on Chrome is looking to permanently drop MV2 extension
Linux?

I can't find it in the downloads.

coffe2mug··on Microsoft builds MacBook Pro rival with NVIDIA-powered Surface Laptop Ultra
ARM based devices don't have boot anything you want like x86 platform - in practice.
coffe2mug··on Googlebook
https://news.ycombinator.com/item?id=43761821

You wrote this remember

coffe2mug··on Googlebook
> more technical oriented people.

technical people are the ones that have built AI farms, stuffing AI on normies throat.

> files is cloud-based

was long gone. Seems you are assuming like Mac iCloud or iOS. There is plenty of local storage if you want to do that.

> Macs (because their hardware is great on laptops).

In other news, many other people don't have money but spend on overpriced macs (excl. neo) - so they buy cheap and cheerful - just works Chromebooks - for basic stuff. Normies also not need 3 x 8K monitors.

> And a laptop is something very personal to me. I don't want to be depressed every time i

Normal people wont use AI features. How many windows users are using copilot etc? many have accustomed to ignore - popup from AV or jumping triggers and just do to their basic stuff in computers.

It is just here in hn - everyday some blogpost - I used AI to completely automate this or that. this model is 1.27 times better that yesterdays model.

coffe2mug··on Googlebook
> when in fact they are just FOSS solutions we have had for a while. Heck, even the verification/testing isn't unique to ChromeOS.

You answered it yourself (last paragraph). The main point is everything is in FOSS but not packaged like chromeos.

I strongly want bluefin/silverblue/bazzite etc to succeed but even installation is PITA. UI is not really that polished. Whether or not great one like proper integration (a.k.a like Apple) like passkey in Google Chrome/Android etc.

- Installer of bluefin etc takes super long - issue with btrfs - no idea. Dev says upstream issue - not us. - flatpak is still pain for normies - we wanted to deploy it to a large compter pool - ecosystem is controlled by Google. So fewer failures with hardware.

- And polish (like you say). Why can't <distro> make it so that uefi etc is hidden?

- Normies expect sleep to work. This is still not perfect with distro (not their fault).

Many including me - want OS to be like an appliance. Just works.

coffe2mug··on Googlebook
You can only dream. Even if they do it - there are billion devices that will hope google will build a new one.

And majority of the world like it.

If you want to share room with RMS and hope for GNU Hurd - do it.

coffe2mug··on Googlebook
It is never for people like you. They try a lot. Something works and many not.

Some people like ikea - try to build. Others want just works items. Why not...

coffe2mug··on I won't download your app. The web version is a-ok
My comment was neither to say stupid or so.

Maybe you are focusing on small statistic of older people from white-collar jobs. Most people in > 70s were primarily in jobs that never needed IT. Yes, they have seen computers , faxes, scanners but not sit in front of computers 9-5. Remember HN needs to remember plumbers, bricklayers, nurses, etc

Not everyone is from Gates type families

coffe2mug··on I won't download your app. The web version is a-ok
> Exactly! Esp if you just move away "one tile" from tech/IT or business-power-users, most people are more or less clueless what they are doing/have to do with a computer.

I don't think so. A majority don't want to. But they are forced by geeks/nerds. Geeks/nerds often show off especially in family/friends parties with older/common folk - telling - I can do this/that. Then average CEO or parent is forced to get a smartphone.

Next the geek/nerd - has no time to maintain the computer/laptop of the parent. Or loses patience explaining updates/double-click/avoid scammer installing software. Then - boom - geek son/daughter - if smart gets a decent pixel/iphone - otherwise gets a shitty Android device - installs everything there. Moves on.

And finally remember it is the young same geek/nerd that will eventually do programming for FAANG/palantir etc. which forces people to install apps, degrade privacy, worsen webapp/websites - all for money.

coffe2mug··on AI overly affirms users asking for personal advice
But nothing wrong about that. Some decisions are to made in a hunch. Even a therapist doesn't suggest to divorce or not. Victims are often not in a state to decide. They need support (as myself).

Humans often don't help. They often suggest - everyone goes through pain. It is part of life blah blah.

coffe2mug··on AI overly affirms users asking for personal advice
> i’ve had venture partners clearly rely on AI (robotic email responses and even SMS) and that warped their perception and made it harder to connect. It signals laziness and a lack of emotional intelligence

This is different. You are also able to detect it. You can question it. You can have a non emotional reaction/action to it.

In my circle, there have never ever been real people (incl lifelong friends/siblings) that suggest divorce even in physical abuse. Reason: they don't want to get in the middle - both for economic reasons like giving the victim money/space etc.

A third party anonymous can assess it without that.

coffe2mug··on Our commitment to Windows quality
I would say the primary reason that windows still is acceptable is familiarity and games. Nothing else.

Non tech people don't care about control panel etc. they just go through the pain of entering the WiFi password. Done.

- gamers. Double click install - go on. I know very few gamers that have moved to Linux.

And corporate. Most normies that I know DON'T have own computers. Everything can be done via smartphone these days.

Page 1 of 2Next →