jadero

joined 1 year ago
[–] jadero@programming.dev 23 points 2 months ago

They are just the biggest asshole in the room.

So one day the different body parts were arguing over who should be in charge.

The eyes said they should be in charge, because they were the primary source of information about the world.

The stomach said it should be in charge because digestion was the source of energy.

The brain said it should be in charge because it was in charge of information processing and decision-making.

The rectum said nothing, just closed up shop.

Before long, the vision was blurry, the stomach was queasy, and the brain was foggy.

Assholes have been in charge ever since.

[–] jadero@programming.dev 2 points 2 months ago

Amazon allows 2FA, but I'm pretty sure they don't require it.

[–] jadero@programming.dev 8 points 2 months ago (2 children)

I have seen some that seem to be doing that kind of thing, but many others that will reject a bad username before asking for a password.

To double check, I just now tried putting a known bad email address into the username field for amazon.ca and was not then asked for a password, but told that no account could be found.

My possibly flawed understanding of login security is that a failed login should reveal nothing about why the login failed in order to prevent information leakage that can be exploited.

[–] jadero@programming.dev 20 points 2 months ago (4 children)

And yet more sites do it, even on desktop. As far as I can tell, most of them are also doing it in a way that breaks security by validating the username before asking for the password.

[–] jadero@programming.dev 6 points 2 months ago

I think you mean "OAUTH" not "OATH". That might make your search for information easier.

Sorry, I don't know much about OAUTH and even less about Mastodon.

[–] jadero@programming.dev 1 points 3 months ago

Then I must be among the manliest of men. :)

I learned all the different ways to use the keyboard in Windows and never looked back. The best of both worlds, although relearning everything now that I've switched to Linux is proving a challenge. I'm starting to think that the Linux GUIs don't have true keyboard accessibility.

[–] jadero@programming.dev 2 points 3 months ago

I saw that. When I get a bit more time, I'll dig through their custom layout to see what I can figure out.

Thanks.

[–] jadero@programming.dev 2 points 3 months ago* (last edited 3 months ago) (2 children)

I'm going to try Unexpected. The swipe for symbol reminds me of my favourite on-screen keyboard, Fitaly. Unfortunately, nobody ever made it available for modern smartphones.

Edit: The main thing I see missing is the option to swipe for uppercase. That may be possible in settings, but I didn't see it in a quick glance.

[–] jadero@programming.dev 4 points 3 months ago (2 children)

The Stalwart mail server allows for that. They call them "spam traps".

Basically, it's a real email address that literally never gets used or referenced anywhere, thus assuring any email received is unsolicited by definition. Stalwart's spam engine uses any such email to help train the spam filter.

I can't imagine that Stalwart is only one implementing such a system.

I've never used Stalwart, but it's the email server I've selected should I decide to do what everyone tells me I shouldn't: run my own server for me, my wife, and the two domains we control. Their documentation is basically a master class in email.

[–] jadero@programming.dev 3 points 3 months ago

Oh, probably. I just hope it 30 years before my death. I'm 67. :)

[–] jadero@programming.dev 9 points 3 months ago (2 children)

Well, if you can tolerate Google, they actually offer this. If I don't interact with my accounts for 3 months, it will send the email I've composed to designated recipients.

 

cross-posted from: https://programming.dev/post/5838448

I came across this semi-randomly by using Search Marginalia to find information on functional programming courses.

I also very much enjoyed the two articles referenced in the footnotes.

 

I came across this semi-randomly by using Search Marginalia to find information on functional programming courses.

I also very much enjoyed the two articles referenced in the footnotes.

 

From Cult of the Dead Cow, Veilid allows anyone to build a distributed, private app. Veilid will give users the privacy to opt out of data collection, and online tracking. Veilid is being built with user experience, privacy, and safety as our top priority. It will be open sourced and available to everyone to use and build upon, with flagship apps available from the launch.

view more: next ›