Searching yarn

Twts matching #http
Sort by: Newest, Oldest, Most Relevant
eapl.mx
eapl.mx
 (3y ago)
↳ In-reply-to » The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.

Soy muy fan de gemtext! Me parece suficientemente simple para tener un buen texto, muy simple de recordar.
Quizás lo único que lo complica es que hay que cortar los enlaces en una línea nueva, aunque ya me he acostumbrado a escribir así en https://text.eapl.mx

⤋ Read More
abucci
anthony.buc.ci
 (3y ago)
↳ In-reply-to » So given's Google™'s recent policy changes where they now outright and blatantly just admit they'll crawl, index and feed your (yes your fuckind) writings, thoughts, conversations, etc into their AI models; Should we as a small niche community (still growing) think about perhaps finally building Yarn.social v2 where we have encrypted feeds? 😅

@prologic@twtxt.net hmm, I’d be up for thinking about that. At least at the protocol and design level–I’m afraid I can’t help much with Go programming.

⤋ Read More
abucci
anthony.buc.ci
 (3y ago)
↳ In-reply-to » I never paid a lot of attention to Ben Shapiro before, but what he says is so transparently asinine it boggles the senses. You really have to have a Fox-addled mind to believe that the search for the submersible was completely faked and that the powers-that-be knew the entire time that it had imploded. To believe that a vast conspiracy among hundreds, thousands (?) of people from several countries and spanning several days was orchestrated to lie to the public in order to.....uh, achieve what exactly? "Undermine institutional credibility"? What does that even mean?

@shreyan@twtxt.net If that’s your reaction to PragerU, then do I have a podcast for you! https://www.stitcher.com/show/the-audit

⤋ Read More
abucci
anthony.buc.ci
 (3y ago)
↳ In-reply-to » Google Says It'll Scrape Everything You Post Online for AI

@marado@twtxt.net It can’t possibly be defensible, which to me always signals an attempt at a power grab. They never explicitly said “we will use anything we scrape from the web to train our AI” before–that’s new. There is growing pushback against that practice, with numerous legal cases winding through the legal system right now. Some day those cases will be heard and decided on by judges. So they’re trying to get out ahead of that, in my opinion, and cement their claims to this data before there’s a precedent set.

⤋ Read More
eapl.mx
eapl.mx
 (3y ago)

En un ejercicio de diseño, ¿que pasaría si hacemos el inicio de sesión solo con un código dinámico TOTP?

Lo que he encontrado es que muchos clientes limitan a 6 y máximo 8 o 10 caractères.
Quizás algo de 12 o 16 dígitos (similar a una tarjeta de crédito, por lo que describe frecuentemente), agregaría seguridad.

Aquí unas fórmulas interesantes para predecir la probabilidad de un ataque de fuerza bruta, dependiendo el número de dígitos.
https://security.stackexchange.com/questions/185905/maximum-tries-for-2fa-code#185917

⤋ Read More
eapl.mx
eapl.mx
 (3y ago)

En un ejercicio de diseño, ¿que pasaría si hacemos el inicio de sesión solo con un código dinámico TOTP?

Lo que he encontrado es que muchos clientes limitan a 6 y máximo 8 o 10 caractères.
Quizás algo de 12 o 16 dígitos (similar a una tarjeta de crédito, por lo que describe frecuentemente), agregaría seguridad.

Aquí unas fórmulas interesantes para predecir la probabilidad de un ataque de fuerza bruta, dependiendo el número de dígitos.
https://security.stackexchange.com/questions/185905/maximum-tries-for-2fa-code#185917

⤋ Read More
xuu
txt.sour.is
 (3y ago)

An official FBI document dated January 2021, obtained by the American association “Property of People” through the Freedom of Information Act.

This document summarizes the possibilities for legal access to data from nine instant messaging services: iMessage, Line, Signal, Telegram, Threema, Viber, WeChat, WhatsApp and Wickr. For each software, different judicial methods are explored, such as subpoena, search warrant, active collection of communications metadata (“Pen Register”) or connection data retention law (“18 USC§2703”). Here, in essence, is the information the FBI says it can retrieve:

  • Apple iMessage: basic subscriber data; in the case of an iPhone user, investigators may be able to get their hands on message content if the user uses iCloud to synchronize iMessage messages or to back up data on their phone.

  • Line: account data (image, username, e-mail address, phone number, Line ID, creation date, usage data, etc.); if the user has not activated end-to-end encryption, investigators can retrieve the texts of exchanges over a seven-day period, but not other data (audio, video, images, location).

  • Signal: date and time of account creation and date of last connection.

  • Telegram: IP address and phone number for investigations into confirmed terrorists, otherwise nothing.

  • Threema: cryptographic fingerprint of phone number and e-mail address, push service tokens if used, public key, account creation date, last connection date.

  • Viber: account data and IP address used to create the account; investigators can also access message history (date, time, source, destination).

  • WeChat: basic data such as name, phone number, e-mail and IP address, but only for non-Chinese users.

  • WhatsApp: the targeted person’s basic data, address book and contacts who have the targeted person in their address book; it is possible to collect message metadata in real time (“Pen Register”); message content can be retrieved via iCloud backups.

  • Wickr: Date and time of account creation, types of terminal on which the application is installed, date of last connection, number of messages exchanged, external identifiers associated with the account (e-mail addresses, telephone numbers), avatar image, data linked to adding or deleting.

TL;DR Signal is the messaging system that provides the least information to investigators.

⤋ Read More
abucci
anthony.buc.ci
 (3y ago)
↳ In-reply-to » I never paid a lot of attention to Ben Shapiro before, but what he says is so transparently asinine it boggles the senses. You really have to have a Fox-addled mind to believe that the search for the submersible was completely faked and that the powers-that-be knew the entire time that it had imploded. To believe that a vast conspiracy among hundreds, thousands (?) of people from several countries and spanning several days was orchestrated to lie to the public in order to.....uh, achieve what exactly? "Undermine institutional credibility"? What does that even mean?

@xuu@txt.sour.is Oh wow I didn’t know he was associated with PragerU. I’ve listened to a few episodes of The Audit podcast, where they basically shred PragerU content, and it’s hilarious and terrifying.

⤋ Read More
abucci
anthony.buc.ci
 (3y ago)

I never paid a lot of attention to Ben Shapiro before, but what he says is so transparently asinine it boggles the senses. You really have to have a Fox-addled mind to believe that the search for the submersible was completely faked and that the powers-that-be knew the entire time that it had imploded. To believe that a vast conspiracy among hundreds, thousands (?) of people from several countries and spanning several days was orchestrated to lie to the public in order to…..uh, achieve what exactly? “Undermine institutional credibility”? What does that even mean?

This is “the moon landing was faked” levels of conspiracy theory.

⤋ Read More