RedWizard [he/him, comrade/them]

  • 1.26K Posts
  • 5.05K Comments
Joined 2 年前
cake
Cake day: 2023年7月1日

help-circle



  • God fucking damn it. Im so glad im done with windows in my personal life but im so fucking pissed that im going to very likely end up deploying this horse shit to hundreds of school desktops while desperately praying there are GPOs to turn it all off. Its fucking bad enough that notepad.exe has a god damn fucking copilot button.

    The amount of fucking energy middle schoolers pour into trying to access AI shit gives me nightmares about how fucking disfunctional an entire generation of kids will end up being as a result of every application being infected with this shit. Chrome browser has AI in it, Chrome Search, notepad, windows photos app, fucking paint probably… Now the whole fucking OS!?

    There is only so much you can do to prevent these kids from having direct access to these fucking psychosis inducing MKUltra machines. My kids have zero access to personal computing devices. They are not allowed to handle our phones, but can look at content with us on a very limited basis. Next year my kid will be assigned an iPad, and while I know how to manage that relationship, I know for a fact most parents have no idea how to manage it.















  • Ok I read the “Whitepaper” and I still don’t really understand what the difference is. The server stores your public key and uses that key to encrypt a challenge message that is sent to your device, which you then use your private key to decrypt to prove your identity. This is tied to the domain that the key was created on. That’s the only real difference I can see here and the least explained part of the white paper. HOW is it bound to the domain address? If the domain address of the server I’m trying to SSH into changes and I try to connect to the old address, obviously it fails, but I probably know the new address. If I attempt to connect to the new address, I’ll be provided a signature for the server I’m connecting to, and then it would attempt the key challenge for authentication.

    So is the domain address used in some silly way with passkeys that causes the key pair to become invalid? It reminds me of the issues with changing your domain on Lemmy, where you can’t convince the federated instances that this new domain is a continuation of the old domain because I think the old domain is used as part of the cryptographic process, and so when it changes, any authentication attempts from the new domain fail.