-
5 votes
-
If you could rebuild user authentication on the web from the ground up, what would you do?
lou's post here resonated with me and my attempts to get my family to use better security practices (i.e. 2FA, password managers). They're very difficult to wrap your brain around to the average...
lou's post here resonated with me and my attempts to get my family to use better security practices (i.e. 2FA, password managers). They're very difficult to wrap your brain around to the average user, and they have the ability to create catastrophic failstates if used incorrectly. Furthermore, even when they work well, they can still be kind of clunky (different sites use different methods; writing down/printing recovery codes feels like a dated solution alongside other tech-forward things).
Also, outside of this, password requirements are their own bugbear, with nearly every site having different criteria. Even as someone who uses a password generator and manager on the regular, I still have to adjust the password creation criteria to do things like fit character limits or specific requirements (and don't get me started on forced resets!). I totally get why so many people reuse passwords, or have a default one that they sort of modify as needed to fit a given site's needs.
From my (admittedly super limited) perspective of a lay user: usernames, passwords, 2FA and the whole stack seems like something that's suffering under the technical debt of decades' worth of web development and networking. It seems like things have inched forward and many new layers have been added to address emergent problems, but the whole system gives a sort of barely-held-together-by-tape feel.
What if we could use what we know now and redesign things from the ground up? If we could start fresh, today, what might username authentication look like beyond the usual username/password combos that we're so used to?
I'm interested in any ideas -- not necessarily just feasible ones.
Also, despite me being the one prompting this thread, don't feel the need to simplify technical explanations or anything. I'm mostly interested in lurking and seeing what all you very smart techy people have to say about the topic. :)
12 votes -
Noto Emoji: A new black and white emoji font
19 votes -
How to make non-English Bing news RSS feeds (and review them before you commit)
1 vote -
The past and future of flag emoji
4 votes -
Twitter accepts buyout, giving Elon Musk total control of the company
51 votes -
Is the long-extinct social network Orkut on the verge of a comeback?
5 votes -
Big Telecom convinces Missouri lawmakers to block funding for broadband competition
5 votes -
Canon has a “museum” of every camera they’ve produced on an obscure part of their website
19 votes -
NFTs are legally problematic
10 votes -
Ubuntu 22.04: An Excellent Linux Distro
8 votes -
Slow Social, a social network built for friends, not influencers
23 votes -
Meet Freshii’s new ‘virtual cashier’ — who works from Nicaragua for $3.75 an hour
10 votes -
American phone-tracking firm demo’d surveillance powers by spying on CIA and NSA
11 votes -
My experience switching to Linux and the need for guidance
Hello everyone, This will be a long post because I want to give my post the proper context. I apologize in advance for taking your time. About five months ago, with the help of relatively high...
Hello everyone,
This will be a long post because I want to give my post the proper context. I apologize in advance for taking your time.
About five months ago, with the help of relatively high ceiling of Windows 11's system requirements, I finally pushed myself to use Linux exclusively on my desktop. It was a decision between using Windows LTSC or Linux and I went with the better long term option.
I am not a programmer but I'm also not unfamiliar with the Linux world. I believe I've used one distro or another on a spare computer for shorts period of time since at least 2008. But those use cases have always been to satisfy the curious side of my brain as I am always interested in technology. So after installing distros ranging from Ubuntu to Arch, my curiosity waned enough to never look deeper into how these systems work. They were, after all, a hobby project on a spare computer that was often gathering dust.
When I decided to switch exclusively to Linux, the next decision I had to make was to pick a distro. Naturally, I looked for the established players first. Ubuntu was the obvious choice because it has long been the distro for newbies and there are a lot of guides on the internet if I ever needed help, which was inevitable. But then I read about snaps and thought that was a deal breaker. I was moving to Linux specifically because I don't want things shoved down my throat. I had no intention to relive that1.
So Ubuntu was a no go, but I was certain I wanted a Debian based distro as their support and software availability was unmatched, maybe save for Arch2. At this point, why not Debian right? It's known for being rock solid and it's Debian itself, not some derivation. Well, because I had various issues with Debian before. These issues were always fundamental and not very specific too, so I didn't want to risk wasting a lot of time fixing things I didn't understand, only for them to break again after a couple of days. Then I came across Pop!_OS, which seemed like a perfect fit. It was Ubuntu without its worst parts, came with Nvidia drivers and it had a company behind it that seemed to be committed to Linux. I installed it and everything just worked. I had zero issues.
But then I started getting that FOMO itch again. GNOME 42 was out and it looked great, but Pop!_OS was two versions behind. I also found out that they're working on their own DE, which might end up being great (it looked nice) but I didn't want to leave an established player like GNOME behind, including all the benefits you get from its wonderful extensions. I started looking for other distos again and Fedora caught my eye. I was obviously aware of Fedora, I even used it once back when YUM was still a thing, but it didn't leave a lasting impression on me. The fact that it wasn't a Debian based distro was also a disadvantage because that meant something different and at this stage of dipping my toes into Linux, I didn't think different might be the best way to go for me. Still, despite my best judgment, I installed Fedora on a USB and used it live. When my gut feeling was confirmed by my research about how Fedora leaves things as stock as possible and is ahead of the curve in terms of upcoming technology (btrfs, PulseAudio, Wayland et al.3) without sacrificing on stability, I was hooked.
After renewing my Timeshift backup, I formatted my Pop!_OS system and installed Fedora. The installation process could use a facelift, but it handled everything perfectly. I didn't even have some of the issues I had with Pop!_OS right after installation. It was literally problem free. I'm now on day #3 of using Fedora and the experience remains the same. The only issue I had to deal with was trying to get Timeshift to work (apparently it doesn't play nice with btrfs on Fedora), but instead of wasting my time with that, I just installed Déjà Dup and I'm good to go again. Barring any drastic issues, I don't plan on changing my distro again.
Now, onto my plea for guidance.
I'm looking for comprehensive resources that will teach me how Linux works under the hood. Considering my non-programming background, I'd appreciate it if the language is approachable. The reason why I want this, for one thing, is to learn more about the system I'm planning to use probably for the rest of my life (in tandem with macOS) but also, I want to do some cool stuff Linux allows users to do.
Just to give a quick example. Yesterday, I installed Rofi, which is, besides many other things, an app launcher. I got it to work just fine, I even got a configuration of my own with a theme of my choosing, but when it comes to using some scripts, I just couldn't do it. Every video I watched on YouTube told me how easy it is to use scripts with it as if it's a self-explanatory thing, but I was simply clueless. There was a lot of lingo thrown around like environment variables, setting up
$PATH
, making the scripts executable withchmod
etc. I have very little knowledge of these things. I want to learn what they are, why they exist, and how they all tie together. I want to learn how/etc/
is different than/usr/
and the difference between X11 and some DE (or if they're even in the same category of things). Now, at the risk of sounding impatient and maybe even worse, I also don't want to go way too deep into these things. I am not, after all, trying to become a kernel developer. I just want to be better informed.There are a lot of information on the internet but most of this information is scattered and out of context. If I try to learn more about one thing, I'm bombarded about other things that I don't know, so in the end I learn nothing. In short, I'm looking for a comprehensive, entry level video series or a book about Linux written in an easy to understand language that assumes no prior knowledge.
Additionally, I'd appreciate any website, YouTube channel and what have you to keep up with recent developments in Linux. I already found a couple as there are plenty of them, but I'd like to learn more about how people here keep up with this fast changing environment.
Thank you for reading and sorry for being so verbose! 😊
1: I know you can remove snaps, but I didn't want to deal with the hassle of any possible issues deleting a core system functionally might bring about.
2: Despite finding its approach fascinating, I had no intention to get into Arch because it's a rolling distro and I didn't want an advanced system that can break at any moment in the hands of a novice like myself.
3: To be clear, I don't know how most of these technologies are better than alternatives, but the Linux community at large seems to think they're drastically better than alternatives and are the future.21 votes -
Elon Musk interview at TED 2022
1 vote -
Elon Musk offers to buy Twitter outright for $41 billion
21 votes -
A series of patent lawsuits is challenging the history of malware detection
7 votes -
Firefox dying is terrible for the Web
26 votes -
My robot double sells out (so I don't have to)
8 votes -
Solving the challenges of robotic pizza-making
6 votes -
DIY haptic input knob: BLDC motor + round LCD
8 votes -
PC cases without transparent side panels
Hi folks! I am, unfortunately, probably going to have to build a new PC soon; my beloved Thelio-r1 is slowly failing, and while my original plan was to buy a Ryzen 7 5800X and keep riding this PC...
Hi folks! I am, unfortunately, probably going to have to build a new PC soon; my beloved Thelio-r1 is slowly failing, and while my original plan was to buy a Ryzen 7 5800X and keep riding this PC for another three to five years, I don't know that I'll actually be able to make that work.
I like the NXT H510 I used for my boyfriend's gaming build, but the thermal performance isn't amazing and, most importantly, I hate tempered glass!
Yes, I understand that people want to show off their (ridiculously!) expensive components. I understand that lots of things have RGB. However, metal is cheaper, easier to work with, doesn't shatter, and I can modify it if I need to.
So, does anyone know of a good mid-tower PC case with decent airflow, up-to-date features (no 5 inch bays, good cable management hardpoints, a cable hiding bay, etc.), and no tempered glass or, preferably, acrylic?
Thank you!
16 votes -
Hacker took over Taylor Swift, Justin Bieber, Drake, Lil Nas X, Harry Styles, Michael Jackson, The Weekend, and Eminem's YouTube channels, uploading bizarre videos to millions of subscribers
9 votes -
The Quasi-Official 2022 r/place Atlas
12 votes -
Elon Musk becomes Twitter’s largest shareholder
16 votes -
Move fast and break things
6 votes -
Contra Chrome
13 votes -
Can you stalk someone with an Apple AirTag?
8 votes -
Does anyone else feel like Tildes gets less effective at surfacing new stuff the longer you're on it?
I notice this primarily with the YouTube videos. I've started to notice that the videos I see posted in here I have already had recommended to me by YouTube. And I realize it must be because when...
I notice this primarily with the YouTube videos. I've started to notice that the videos I see posted in here I have already had recommended to me by YouTube. And I realize it must be because when I watch a video here, the YouTube algorithm decides I'm interested in that kind of thing. So, functionally, by posting and interacting with content in Tildes we are tuning the various algorithmic recommendation feeds that we interact with to view us all similarly.
It's just an interesting side effect I noticed and some food for thought about the effectiveness of a link aggregator or discussion forum at surfacing novel, interesting content we might not find otherwise. In part, this could just be an effect of Tildes being kind of small and having lots of self-selection biases for its user population. Perhaps if it was more diverse we'd be exposed to more things that break the mold and recommendation algorithms won't be able to pin it all down as easily. In fact, we may be able to use this effect as a way to test the breadth and diversity of content and types of people a site is attracting.
11 votes -
How Native Americans are trying to debug AI’s biases
4 votes -
It looks like you’re trying to take over the world
14 votes -
Women are splitting off from the doomsday prepper community
19 votes -
"Smart" surgical gloves track medical students' hand movements
5 votes -
Macho cyberwarfare and the long game
2 votes -
Apple would be forced to allow sideloading and third-party app stores under new EU law
23 votes -
What noise canceling headphones can block?
One of the greatest sources of stress in my life right now is noise. This is consistent with the (presently unconfirmed) hypothesis that I'm probably on the spectrum. I live in a very noisy...
One of the greatest sources of stress in my life right now is noise. This is consistent with the (presently unconfirmed) hypothesis that I'm probably on the spectrum.
I live in a very noisy neighborhood, with many sources of loud music several days a week. I use a regular headphone to try to isolate myself, but they're not always effective. I was thinking of purchasing a noise canceling headphone (NCH). I'd listen mostly to podcasts and white noise. Hence the title question: can these headphones cancel variable non-regular noises like loud music around me? And to what degree?
Product recommendations are welcomed, with a focus on great noise canceling. I have a preference for over the ear headphones, but that's not a hard requirement. Other than that I don't have any requirements.
Thanks!
11 votes -
The Ant Mill theory of discourse
7 votes -
The end of the nice gtk button
11 votes -
The fifteen-minute bug initiative
6 votes -
The future of lithium-ion batteries
4 votes -
Good web dev communities?
Hey folks. May someone recommend a good web dev community out there for quality discussions? Right now I'm using Vue for a project and I'm wrestling with architectural decisions. I'd love for a...
Hey folks.
May someone recommend a good web dev community out there for quality discussions?
Right now I'm using Vue for a project and I'm wrestling with architectural decisions. I'd love for a place where I can discuss different approaches' trade-offs and merits.
Many thanks. :)
11 votes -
Analysis by computer science professor shows that "Google Phone" and "Google Messages" send data to Google servers without being asked and without the user's knowledge, continuously
11 votes -
Mozilla Rally - Data collection for research about data collection
9 votes -
YouTube Vanced is discontinued
@Vanced Official: Vanced has been discontinued. In the coming days, the download links on the website will be taken down. We know this is not something you wanted to hear but it's something we need to do. Thank you all for supporting us over the years.
25 votes -
Youtube-dl’s hosting provider fights record labels’ lawsuit
14 votes -
Mesa 22.0 released with Vulkan 1.3, many open source Intel & AMD driver improvements
5 votes -
Substack just released an RSS reader
6 votes -
ICANN rejects Ukraine's request to block Russia from the internet
15 votes -
Apple Event (8th March) - Peek Performance
12 votes