• 0 Posts
  • 106 Comments
Joined 1 year ago
cake
Cake day: May 31st, 2023

help-circle
  • hikaru755@feddit.detoich_iel@feddit.deich_iel
    link
    fedilink
    Deutsch
    arrow-up
    1
    ·
    29 days ago

    Na ja, dein “wer da drinne das 2fa feature nutzt hat das konzept von 2fa nicht verstanden” klingt – gerade für Laien – schon sehr nach “dann kann man es auch gleich lassen”. Das wollte ich nur richtig stellen.


  • hikaru755@feddit.detoich_iel@feddit.deich_iel
    link
    fedilink
    Deutsch
    arrow-up
    2
    ·
    edit-2
    29 days ago

    wer da drinne das 2fa feature nutzt hat das konzept von 2fa nicht verstanden.

    Das würde ich nicht so hart sehen, 2FA im PW-Manager ist immer noch um Welten besser als kein 2FA, und für viele Normalos kannst du nichts komplizierteres als das empfehlen weil sie es sonst halt gar nicht benutzen würden.

    Passwörter können auf verschiedenen Wegen in die falschen Hände geraten, 2FA im Passwortmanager schützt immer noch prima gegen alle davon, außer halt wenn der Passwortmanager selbst geknackt wird. Und wenn das passiert, ist die Wahrscheinlichkeit hoch, dass der Angreifer es eh auch schon in eins meiner Geräte reingeschafft hat, und somit auch Zugriff auf eine etwaige getrennte 2FA-App hat. Um das zu verhindern, muss es dann halt wirklich schon die Yubikey-Lösung sein, was aber wiederum aktuell nichts ist, was die Non-Techies in meinem Leben realistisch tatsächlich benutzen würden.

    Edit: für meine Argumentation ist es wichtig dass du nicht ohne eins meiner Geräte in den PW-Manager reinkommst, aka das Modell von 1Password. Ich glaube Proton Pass ist nicht ganz so gut abgesichert, weil deine Daten da nur mit dem normalen Account-Passwoet verschlüsselt sind, nicht nochmal mit nem extra-Key






  • where anyone thinks it’s ok or normal to recommend suicide to people

    Except that’s already happening even without it being normalized, there have always been assholes that are gonna tell people to kill themselves, especially if they’ve never seen the person they’re talking to before. I don’t see how this is any different.

    Literally the whole thing would not have happened without the policy.

    It also wouldn’t have happened if a fucked up system wasn’t withholding actual, reasonable alternatives that the person was clearly asking for. That’s my point. Let’s fix the actual problems, rather than try to silence the symptoms.


  • …and did you notice how everyone was outraged by that? That incident was not an issue with assisted suicide being available, that was an issue with fucked up systems withholding existing alternatives and a tone-deaf case worker (who is not a doctor) handling impersonal communications. Maybe it’s also an issue with this kind of thing being able to be decided by a government worker instead of medical and psychological professionals. But definitely nothing about this would have been made better by assisted suicide not being generally available for people who legitimately want it, except the actual problem wouldn’t have been put into the spotlight like this.


  • I don’t want to create a future where, “I’ve tried everything I can to fix myself and I still feel like shit,” is met with a polite and friendly, “Oh, well have you considered killing yourself?”

    Are you for real? This kind of thing is a last resort that nobody is going to just outright suggest unprompted to a suffering person, unless that person asks for it themselves. No matter how “normalized” suicide might become, it’s never gonna be something doctors will want to recommend. That’s just… Why would you even think that’s what’s gonna happen





  • I was thinking of an approach based on cryptographic signatures. If all images that come from a certain AI model are signed with a digital certificate, you can tamper with metadata all you want, you’re not gonna be able to produce the correct signature to add to an image unless you have access to the certificate’s private key. This technology has been around for ages and is used in every web browser and would be pretty simple to implement.

    The only weak point with this approach would be that it relies on the private key not being publicly accessible, which makes this a lot harder or maybe even impossible to implement for open source models that anyone can run on their own hardware. But then again, at least for what we’re talking about here, the goal wouldn’t need to be a system covering every model, just one that makes at least a couple models safe to use for this specific purpose.

    I guess the more practical question is whether this would be helpful for any other use case. Because if not, I hardly doubt it’s gonna be implemented. Nobody is gonna want the PR nightmare of building a feature with no other purpose than to help pedophiles generate stuff to get off to “safely”, no matter how well intentioned





  • It’s gonna get much worse when you start to try mapping days of the week onto the new times. Are days gonna be the same everywhere as well, to stay from 0 to 24? If so, have fun saying things like “Let’s find a time on Wednesday/Thursday”. People likely couldn’t be bothered and would probably just use the day that their normal wake-up time falls on to mean the full solar day instead. At which point you could also just say okay, weekdays are still following local solar days. But now what weekday is it halfway around the world? Now you need to look up their solar day.

    All this to say - abolishing time zones will introduce the reverse problem for every problem that it seemingly solves. You can’t change the fact that our planet rotates and people in different locations will follow different schedules. Turning the lookup-table upside down is just a cosmetic change that doesn’t remove the situation that’s causing the confusion. I’d rather just stick with the set of problems that we’re already used to dealing with.