Spyke

Replies

Comment on

Password managers are less secure than promised

From the paper itself:

We had a video-conference and numerous email exchanges with Bitwarden. At the time of writing, they are well advanced in deploying mitigations for our attacks: BW01, BW03, BW11, BW12 were addressed, the minimum KDF iteration count for BW07 is now 5000, and their roadmap includes completely removing CBC-only encryption, enforcing per-item keys and changing the vault format for integrity. On 22.12.25 they shared with us a draft for a signed organisation membership scheme, which would resolve BW08 and BW09. At our request, to maintain anonymity, they have not yet credited us publicly for the disclosure, but plan to do so.

I didn't look at the response to other Password managers, but the gist here is that the article is overblowing the paper by quite a bit and the majority of the "issues" discovered are either already fixed, or active design decisions.

Comment on

TSMC Arizona struggles to overcome vast differences between Taiwanese and US work culture

This makes me laugh because I work for a UK company that was bought out by an American company, who's trying to treat the UK staff how they would treat US staff - and it's not going well.

Our American colleagues cannot fathom how much time we take off for holidays, especially around Christmas. They also got a shock when doing some recent "restructuring" they couldn't just fire a bunch of UK folks.

Comment on

*Permanently Deleted*

But confusingly, Trump has continued to send Vance out to campaign events all week, while the Republican presidential nominee has remained largely out of the public eye. Given Vance’s low appeal, it’s unclear how this strategy helps the campaign.

Trump is going to blame Vance for the failure of his campaign, calling it now. He'll have the usual shit about dems as well, but he's going to scapegoat vance and throw him under the bus just like he's done with literally everyone else before him.

funny

Comment on

Expert swordsmen

If I'm buying a sword, even if that sword is going to spend 99% of its time on a wall or in a display case, I still want to know that it feels good to hold, otherwise what's the fucking point of owning a sword.

If I see a sick in the street, I'm going to do the exact same thing, I ain't no expert, I just like to experience a little joy in my life where I can.

Comment on

Reject DRM embrace GOG

Steam doesn't enforce the use of its DRM (which is super easy to bypass anyway but that's a side note).

Steam lets you publish your game on their platform and hand out as many keys as you like to resell on other platforms (at no cost) while still doing all the heavy lifting of hosting and distributing.

Steam doesn't decide what kinds of titles get published on their platform any more than GoG does, so the bit about remasters, etc. is a bit weird. Besides you the user should get to decide what you want to buy and play.

I love GoG, but I love Steam as well. They're not mutually exclusive and you can have both.

Comment on

*Permanently Deleted*

I'm very fortunate that my partner loved giving blow jobs, she'll even just randomly start sucking my dick unprompted because she's filthy and enjoys it so much.

That said when I met her, she wasn't as keen on receiving but luckily enough I have been able to warm her up to it more, because I love eating her delicious cunt.

funny

Comment on

A mom's advice

Oh I completely misunderstood this one. I thought the joke was that the age difference was borderline problematic so the guy was trying to eek out a few extra hours to make it less bad.

Nope, turns out it's just astrology bullshit.

Comment on

Is Plex really Self Hosting?

It's self hosting by the literal definition that you host the server yourself.

That it's closed source and sends all kinds of data to another server is an entirely separate (and valid) concern.

As much as I agree with the concerns around Plex, I would rather we didn't start gatekeeping the self hosting community with arbitrary requirements and grey lines around what is and isn't "true self hosting" or whatever. I would far rather we inform people and let them make their own choices about what they want to host on their private devices and networks.