Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:Nobody understand what this is (Score 3, Informative) 20

This is how I've come to understand it. I welcome any and all corrections.

Passkeys are a cryptographic key stored in a Secure Element. This is usually a private key inside a small cryptographic engine. You feed it some plaintext along with the key ID, and it encrypts it using that key. The outer software then decrypts the ciphertext using the public key. If the decrypted text matches the original plaintext, then that proves you're holding a valid private key, and authentication proceeds.

The private key can be written to and erased from the Secure Element, but never read back out. All it can do is perform operations using the secret key to prove that it is indeed holding the correct secret key.

On phones, the Secure Element is in the hardware of your handset. On PCs, this is most often the TPM (Trusted Platform Module) chip. In both cases, the platform will ask for your PC's/phone's password/fingerprint/whatever before forwarding the request to the Secure Element.

Yubikeys can also serve as a Secure Element for Passkeys; the private key is stored in the Yubikey itself. Further, the Yubikey's stored credentials may be further protected with a PIN, so even if someone steals your Yubikey, they'll still need to know the PIN before it will accept and perform authentication checks. You get eight tries with the PIN; after that, it bricks itself.

The latest series 5 Yubikeys can store up to 100 Passkeys, and Passkeys may be individually deleted when no longer needed. Older series 5 Yubikeys can store only 25 Passkeys, and can only be deleted by erasing all of them.

Theoretically, you can have multiple Passkeys for a given account (one for everyday access; others as emergency backups). Not all sites support creating these, however.

Comment Re:Boxed in (Score 1) 138

I mean, it sounds like you have bad neighbours. I live in a townhouse, and my neighbours (co-owners, really) are great. We help each other out. I can ride my bike for a few minutes in any direction and be out on a beautiful trail or out by the lake. Don't get me wrong, I've very deliberately selected a city to live in where access to nature is trivial. That was a priority. But I'd be happy enough to live in an apartment here if I needed to, the only thing that stopped me in the first place is the rules/laws surrounding pet ownership (I had 3 cats at the time, 4 now).

I'm much more in favour of being communally rich. Whole forests and lakes are available to me, not just a yard and a backyard pool or whatever. There are lots of ways to have peace and quiet and beauty, and only a few of them are living out in a field, isolated from everyone else. I'm a pretty introverted person, but when the park is big enough, you don't have to talk to anyone to enjoy it.

Comment Re:Simpler steps (Score 1) 138

I think to be fair, it has both a problem with not enough taxes and bad priorities. Unless one of the priorities you're talking about is corporate welfare and low taxes on the rich. Certainly it is the case that they (and Canada) could raise enough money if they would actually just enforce their tax laws and implement wealth taxes on the ultra-rich.

Comment Re:asking for screwups (Score 1) 116

How would an LLM accurately determine which cases were "easy"? They don't reason, you know. What they do is useful and interesting, but it's essentially channeling: what is in its giant language model is the raw material, and the prompt is what starts the channeling. Because its dataset is so large, the channeling can be remarkably accurate, as long as the answer is already in some sense known and represented in the dataset.

But if it's not, then the answer is just going to be wrong. And even if it is, whether the answer comes out as something useful is chancy, because what it's doing is not synthesis—it's prediction based on a dataset. This can look a lot like synthesis, but it's really not.

Comment Re:News flash, subtext (Score 2) 34

AI scrapers use these residential proxies. It's not (just) VPNs and Tor routing. Several bottom-feeding companies openly advertise such scraping services, for pretty much any country you may want. I administer a wiki that's been on the receiving end of such scraping, and the majority of these scraping requests are in fact coming from residential IP-addresses rather than data centers.

I don't know whether these are hacked accounts, people getting tricked or paid to run these scraping apps on their devices, but it's impossible to block them all. Even if you let fail2ban block entire /24s for every detected hit (even disregarding the collateral damage and the fact that these blocks don't solve the issue, the fail2ban and iptables overhead starts to outweigh the apache load at some point).

Anubis seems to be taking care of it for now, but it's obviously only a matter of time before they can deal with that one too. Although its delay does enable fail2ban rules to block the IP-addresses before they get to stress the mediawiki php scripts, attempting to diff 2 revisions of a random page from 10 years ago.

Comment Re:Why not use a food bank? (Score 1) 141

I don't know about your food banks, but here in Canada, they're not run by the government. They're charities. I'm ALREADY paying taxes to try to make sure our government takes care of less fortunate people, and they've failed by foisting that off onto food banks, which are run on shoestring budgets, charity, and luck. What happens when people can't afford to give to the food bank, like when there's a recession?

If it were a government agency that was guaranteed to have affordable/free food so that anyone could at least cover their basic dietary requirements, I'd definitely be agreeing with you here. But it's not. We need to understand that the government is failing us at the most basic level.

Comment Thirty Fucking Years Late (Score 1, Informative) 91

Congratulations, you feckless imbeciles. You've "innovated" general software package management a mere three $(GOD)-damned decades after Redhat and Debian did it.

While you're at it, why don't you "invent" a tiling window manager that can be driven entirely from the keyboard... Oh, wait...

Honestly... Why is anyone still voluntarily giving money to these chowderheads?

Comment Re:Silly metrics ... (Score 1) 164

There's actually a solid history to show that being a late adopter isn't always a bad thing. There's clearly some value in LLMs, but at this point most of what we are hearing is speculative hype intended to kite stock prices. Basically a ponzi scheme.

I'm sure that some value will drop out of this in the end. I am not at all sure what it will look like, except, probably not much like what the hucksters are promoting.

When things are clearer, it will make sense to invest. Right now, it's probably best to let other people burn cash. Particularly since one of the things they're doing is completely destroying copyright law, so when they're done, we can just copy whatever they did with impunity.

Submission + - Nvidia Accused of Media Manipulation Ahead of RTX 5060 Launch

jjslash writes: Hardware Unboxed has raised serious concerns about Nvidia's handling of the upcoming GeForce RTX 5060 launch. In a recent video, the independent tech reviewers allege that Nvidia is using tightly controlled preview programs to manipulate public perception, while actively sidelining critical voices.

The company is favoring a handful of more "friendly" outlets with early access, under strict conditions. These outlets were given preview drivers – but only under guidelines that make their products shine beyond what's real-world testing would conclude. To cite two examples:

  • One of the restrictions is not comparing the new RTX 5060 to the RTX 4060. Don't even need to explain than one.
  • Another restriction or heavy-handed suggestion: run the RTX 5060 with 4x multi-frame generation turned on, inflating FPS results, while older GPUs that dont support MFG look considerably worse in charts.

The result: glowing previews published just days before the official launch, creating a first impression based almost entirely on Nvidia's marketing narrative.

Slashdot Top Deals

Badges? We don't need no stinking badges.

Working...