I do consider the master password to my password manager as my “thing I know”, and not the randomly generated passwords it stores. But you’re saying that have-vs-know is not really important in the security space, that was mostly just a handy shorthand?

so are passkeys just a simplified workflow version of the complicated dance I have to do on windows to get git commits to push easily with the public key from putty-gen? But also the private key is sometimes locked to the device it was generated on? I guess I should read some actual technical docs on em.

I have a basic question, I learned that MFA should draw from multiples of “things you have” (totp) and “things you know” (passwords). There’s all this talk of passkeys replacing passwords, but aren’t passkeys in the “thing you have” category, not the “thing you know” category? My worry is that an unlocked computer or unlocked phone will let someone access ALL of a person’s accounts because now they have the thing and don’t need you at all. Putting access to my entire digital life behind my 4-9 point lock symbol? Or worse, a fingerprint?

The OS is probably optimizing it away, there might be a setting under battery management or app deep sleep that stops the OS from killing it, but it’s gonna use a bunch more battery, too. I think this is a simple enough thing that a little esp could do it instead of a whole phone app

Whenever I see a article about ‘cups’ of coffee, I assume it’s just an observation study thing where large groups of people get surveys on their habits and their regular checkups are more thorough and available to the researchers. So the researchers can only tease out so much info without actually running an experiment with controls, like how big a cup is.

This is just standard “ram/chips are so expensive now that all consumer devices had to raise prices and thus sold less”. With maybe a little general reduction in overall consumer spending?

There’s no rules across instances, votes are whatever you want them to be. Either yes this is good/right/ilikeit/peopleshouldseeit or no it’s wrong/spam/misinformation/wrongcomm/idontlikeit/idontlikeyou/ithurtmyfeelings.

Down votes could easily be for the source, Marques has done some questionable stuff, or the format since it’s just a summary, or the community someone doesn’t feel like it belongs in this community.