yosamino

> one-time codes

One-time codes rely on a password: either it is stored in your 2FA App, or they rely on your email password, or they rely you storing a password somewhere else. OTP rely on stored secrets.

You can make these secrets be much larger than the humble password and call them "private keys" :

> asymmetric key cryptography, hardware tokens

If these are not protected by a passphrase they can be stolen. Which seems like a variation of "nobody can store passwords securely". To mitigate the effects of them being stolen, you need to protect them with a password.

I sympathize with your desire, but it's not that easy, although I do think that we can reduce password usage.

But fundamentally a password is a trust anchor in your brain. I have yet to find a way around this limitation.

Any useful disposable email service will only allow *receiving* emails. As a user this protects me against possible bad actors that for some reason need me to give out my email to them.

Any service allowing *sending out* mail from their mailservers will quickly find their mailservers blocked - this is also list based. A common one being spamhaus.org . The way firefox relay solves this is by only allowing to *reply* to mails you have received, and I assume they have some rate-limiting in place as well.

This is really just about making life harder, and forcing people into using an emailaddress as their identity token, which seems all sort of wrong.

Next someone will block mailservices that allow + adressing or other kinds of alias systems ?

The easy part of the answer to this is: go to openstreetmap.org, sign up for an account, login (top right) and then press the "Edit" button (top left). There is a lot of info[0] on their wiki on how to get started.

There is also information on how to map power lines[1] - I am guessing applying it to your specific example is what might be a bit harder, but it's probably doable.

The overpass-api tool is useful for finding objects, for example the power lines in the area that you mentioned: https://overpass-turbo.eu/s/1f6N

It's sometimes a bit fiddly, but when I very occasionally (like once a year) find something to correct, I can get it done.

Happy mapping.

[0] https://wiki.openstreetmap.org/wiki/Beginners%27_guide [1] https://wiki.openstreetmap.org/wiki/Power_lines

All the minifying operations are done on that internal datastructure.

Then it writes it out again into a textfile, ready for the browser to parse it again - hopefully the minifying step made it a bit easier for the browser to parse this minified CSS.

So that I can do something along the lines of "Log in with XMPP" and then my client asks me "hey do you wanna allow movim.eu to access foo/do bar on your behalf" ?

That sounds very useful. Sharing my password like this does not seem a great idea.

On https://mov.im/?login it says:

"Login using any XMPP account or create a new one"

But it only shows me a login form where I can enter my xmpp address and a password. This signals to me that I can log into my existing non-movim-xmpp account, but I have to enter my password on there? That can't be right. What am I misunderstanding ?

He is not saying

> See I found a few people who do run servers, therefore your argument is invalid.

His point is:

> It is correct that only a tiny percentage of people do run servers. But it is exactly this tiny percentage who make certain projects successful.

He then generalizes this observation. To paraphrase: "People don't want to run their own servers" is similar to "People don't want to write their online encylopedia" - true, but not the defining point.

In a sense this article doesn't say that the argument "people don't want to run their own servers" is wrong, but that it is the wrong argument.

They seem to have moved in 2016

> Opened in October 2016, the modern office building is the ideal venue for hosting contemporary work solutions.

https://mspoweruser.com/microsoft-calls-new-german-headquart...

This small business is not allowed to let customers enter the shop if they can't validate their vaccination status. To do this one needs a QR code reader on a phone. Practically speaking there are no alternatives.

Why browsers do not have better functionality built in for authentication is something that's always been a bit baffling...

If anything roundcube is a better webmail client than many of the mail-provider ones. And that's ignoring all the ads and tracking that these come embedded with, even if you pay for them.

I haven't used gmail-for-organizations but if it's anything like the normal gmail interface then ... I guess some power users will prefer it? But in my experience many people prefer roundcube, because it's simple and usable. Not that it's perfect or better in all the ways, it's just from my experience and the users I talk to, it is just as good and fills a need that gmail doesn't.

Same goes for spam-filtering. It's not that spamassassin/amavisd/rspamd/postscreen/RBLs/whatever is 100% perfect, it just get's you pretty far, and from my experience also gmail, as the main contender, has varying success on how close they achieve 100%.

And even security is not magic. A large mail provider doesn't have access to magically different security tooling than everyone else. They have a threat model that is slightly different and their scale allows them to do some things that not everyone can. But wrt to one's userbase it's perfectly possible to be "just as secure".

Running your own org-mailinfrastructure is certainly not "artisanal" - for some reason this comes off slighly dismissive in the article - it's just that, as anything, it's work that you have to want to invest in. A trade-off where it often does make sense to outsource. But then email is not so different from any other service you want to provide.

... but then I see that the article seems to partially be writing off of the experience of using the U of Toronto mail system, which seems to be using squirrelmail and procmail. I didn't even know squirrelmail was still developed - this impression kind supported by there being no news between 2013 and October 21, 2021 on the frontpage https://squirrelmail.org/ while procmail is unsupported since approximately forever (it feels like pre-9/11 but I am not sure).

If you compare that experience with outlook.com - then I can certainly see why one could come to the conclusion in this article.

EDIT: Heh: my guess of procmail being pre-9/11. Wikipedia says: "Final release 3.22 / September 10, 2001"

This article is from 2013 after all.

And the installation process was so easy. No fiddling around "rooting" a phone - just "pmbootstrap init" and answer a few questions.

I've not actually used it as a phone yet, so for me so far the usefullness is limited, but I read it works, and I can write graphics to the framebuffer. Of my own phone! How cool is that!

It also boots into a variety of desktops in various states of usability.

For many pieces of software it's possible to use it with a keyboard-only. This is neccessary for accessibility, but it's also just what the good old hotkeys do.

Doesn't work for everything but it already gets you very far.

On top of that, there is some software that is made to cater specifically to keyboard-only use. Many tiling window manager work well with just a keyboard ( I personally am partial to i3[0]) and even for webbrowsers there are extensions like tridactyl[1] that make it easier to use without a mouse. That doesn't work for everything. It's possible to do 3d work without a mouse - but I find it easier to have access to a mouse. Specifically a trackpad.

This can of course be turned on it's head, and you can use something like dasher[2] to do your typing and - to get this back on topic - dasher can be used together with eye tracking to live a "keyboard free life"

[0] https://i3wm.org/ [1] https://addons.mozilla.org/en-US/firefox/addon/tridactyl-vim... [2] https://dasher.acecentre.net/ [3] https://www.inference.org.uk/djw30/dasher/eye.html

For example, you can't change user settings from an extension. Or install other extensions.

Huh, I didn't realize that SCRAM is this widely supported https://xmpp.net/reports.php

Thanks for the hint!

Hate speech is defined pretty broadly so something as harmless as - free translation - "man, what a schlong!" directed against a state-level politician caused a small media storm and included the police raiding the house (well... they didnt' even manage to raid the correct house) of the person who typed out that tweet. (#pimmelgate if you want to look it up)

That's not to say that there aren't more vile comments and death-threats that maybe deserve to be looked at a little closer to protect the victims, that are also the focus of these legal tools. But in general it seems something prone to abuse of power, and hosting providers can, to varying degrees, be coerced into aiding the state agents in enforcing these laws.

Don't underestimate the lenghts some people will go through for a harmless prank. But you are probably correct a modern phone's fingperprint-reader is probably not fooled by an etched stick of gummibear.

Incidentally - I always wanted to have a device that you could stick your finger into, that would use a, let's say, laser to etch different fingerprints onto the tip of my finger.

and ( warning: NSFW ) Yes - https://youtu.be/CbM--4-z0cs?t=87

This is incorrect.

Germany decided to phase out nuclear power after the Fukushima desaster. This was well into Merkels's chancellorship, and there are still nuclear power plants.

If I was a worker who was away from home 12 hours a day, I would want for my partner to have a good life with happyness and joy while I am away. Of course it's better to come home to a person who feels she is living a fulfilled life, rather than someone who has been lonley the whole day. Makes you feel as if the long hours are actually making a difference.

I don't have a clue on how to read such a statement correctly. But what I am seeing there is over 800 million USD worth of revenue. For one year.

If that is not enough to build one browser that is not crammed with ads then we are all doomed anyway.

  https://outgoing.prod.mozaws.net/v1/8a4c4de845953bc85d10c6465c5c0f11210b5ca1c195b70d7ddfcf8b74592477/https%3A//clearurls.xyz/

  https://outgoing.prod.mozaws.net/v1/8a4c4de845953bc85d10c6465c5c0f11210b5ca1c195b70d7ddfcf8b74592477/https%3A//wiki.clearurls.xyz/

Why Mozilla? Why are you tracking us ? Of all the pages...

Which is a pity, because, besides the fact that Chrome has almost all of the marketshare, they also basically own Mozilla financially (is this still correct ?) and technologically Firefox uses Skia and Harfbuzz for rendering, both heavily dependent on Google.

So there is basically no competition for Google in the browser market.

This can't be good.

Not entirely 100% percent the same sentiment, but still a pretty good soundtrack for not handing out Fucks too quickly: https://www.youtube.com/watch?v=Vqbk9cDX0l0

I will grant you that the situation concerning copy/paste as a whole is "not great", I have certainly run into issues before. But this interaction where selecting a word either by dragging a mouse along some text, double or triple clicking to select and then being able to paste this text somewhere else just by pressing the middle-mouse button is just really god computing.

Crucially: This is a very local interaction that does not interact with my clipboard at all. Which lets me copy two things at the same time. I use this all the time for copying/pasting username/password combos.

But that reminds me - the correct way to do this is setting up my password manager to do it for me...

I am interested in the "transport station" you described. I am currently trying to find a way to seamlessley working on multiple computers at the same time, and a shared clipboard like that would be really iteresting. Also to synchronize to my phones' clipboard. Do you have some already written notes on the issues that you ran into ?

reading yoru entirely comment, I am not entirely sure if you mean changing how it's implemented or if you really would like to get rid of the user interface it has.

Because copy-on-select along with middle-click-to-paste is like ... the best thing. Tiny bits of data stuck that follow your cursor is the most information-at-my-fingertip feeling that I can get out of these machines.

But if you take one step back, the demographic is not very small at all! It includes everyone who is a bit older and maybe can't see as well as when they were 23, so they like to increase the contrast a bit. I myself am not very far above 23 and I read hackernews zoomed in to 130%, it's just more readable. Many people have an easier time using a computer by for example making buttons larger so that a mouse can click them faster. There are more examples.

And last but not least: Writing functional UI tests for applications is enabled, in a good chunk by accessibility capabilites built into the gui toolkit. My job would be much harder if that wasn't baked in to most UIs.

So, while I agree with you: let people have fun playing with technology and create new things without having to implement everything from the beginning, I don't think it is fair to just dismiss accessibility concerns like that.

What are you referring to here?