• 2 Posts
  • 38 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle






  • I get 17.45 on an iPad Pro. This is with all extensions disabled and my adblocker off. They say I am unique in the past 45 days. Looking through the info I don’t see how this works. Could it be that no one else has tested with an iPad Pro? It’s not like the hardware in this model is different from a similar one. You really just cannot meddle with it. It’s a fairly locked down ecosystem.

    If I took an iPad, reset it and ran the test. Then reset it and ran the test again, would both be unique?





  • I agree that decrypt/encrypt is bad—it is simply not E2EE. The solution would have to be a better method of public key distribution for ‘federated’ systems.

    While I don’t know anything specific about facebook messenger, E2EE doesn’t necessarily preclude what you suggest. A messaging service could store the entire chat history encrypted without decryption keys. When you get a new client you could restore the entire history in encrypted form onto your device. You would then use a recovery key you would possess to decrypt the message history on your end. At no time would the messaging service have the keys to decrypt. I’m not saying that is what facebook does.






  • If you enable advanced data protection apple cannot recover your account. You need your recovery keys or a designated recovery contact.

    The apple doc implies (to me) that a SIM swap only works after you authenticate on an apple device (e.g. using your password) even without advanced data protection. I have never tested that.

    You can use the long process (many days) to recover an account assuming you haven’t enabled advanced data protection. I’m okay with that as it is perfect for my grandparents (I had an older relative who got their account back through this method).

    I get that you could SIM swap to recover other accounts (not Apple) if they have SMS as a recovery method. That sucks and it really sucks for people who don’t get that an email or SMS recovery can be a giant hole in security.


  • The document you linked says it requires a combination of your apple account password plus an SMS text sent to a pre-registered phone number? Seems like a pretty good setup for most people. Also has the alternative of recovery contacts and recovery keys.

    It looks like turning on advanced protection would eliminate the SMS method but I am not 100% sure. Then you would need recovery keys or recovery contact.

    https://support.apple.com/en-us/102651

    My biggest worry in these cases is not that I get locked out, but rather that Apple mangles my keychain. I have a USB CSV of my passwords in my bank safety deposit box. With passkey I am not sure of how I would get a similar backup.




  • I generally agree with your take on what is happening. But drug overdoses are way up in all states because of Fentanyl and Covid related breakdown of social programs. Since overdoses increased in other states too, I find it unlikely that we need to recriminalize to reduce them. Additionally, we have DECADES of criminalization that wasted billions without fixing the problem. How will this criminalization do what was not done in all that time in all those states. If it won’t fix it, why do we want to dump money into the police and courts?

    I support a lot of actions to reduce the nuisance. I hate cleaning up needles and seeing public spaces turned into inhospitable areas. I just don’t think criminalization of possession is going to fix that. It didn’t for the last 40 years. It won’t now.