• 0 Posts
  • 2.08K Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle

  • Realistically speaking, MFA most importantly is to get away from the “something you know” factor since that is generally more vulnerable. Even if it is a single factor, it’s a better factor.

    Also enables people to meaningfully have multiple factors if they choose. The password managers generally require a master passphrase and/or unlocking through something like “Windows Hello”




  • There’s not particularly good reason to stop doing it in that scenario either.

    You have an offline technology stack in that elevator that has been doing the job correctly for 20 years. Why take on the expense and risk of changing things that aren’t currently broken?

    It would be crazy if you are building new to resort to that stack, but for an established elevator, why bother?

    Same for some old oscilloscopes at work. I’m not crazy about the choice but I can hardly suggest it would be practical to change it while the oscilloscopes still do their function.

    I would say it’s a problem if the stack is online, but if it is self contained, the age of the software doesn’t make it a problem in and out itself.


  • If your knees are screwed up from “just turning 30”, then that indicates an expectation that you don’t need injuries to have bad knees.

    Repetitive impact injury can screw things up, but the vast majority of people bemoaning their old age joints especially in their 30s are not exercising enough and/or are obese.

    Whatever the case, bring it up to your doctor, didn’t assume changes like this are just normal/expected.


  • That is a rough situation, as from experience I can say trying to maintain a healthy weight will cause the obese folks in the family of accusing you of being anorexic and take any opportunity to try to get you to fatten up.

    They also marvel about how I must have good genetics because my back and legs don’t hurt and my blood tests come back so good at physicals.


  • There’s a sweet spot. Go too easy and they get screwed up and go too hard and they screw up.

    But it’s true that being reasonably active helps a ton. Someone I know who complained of joint pain as they retired claims it went away as his leisure time caused him to walk all over the place, and now he’s 70 with no joint pain. Closest he got was when we spent two hours in a crawlspace working on some frozen pipes and complained that his back hurt a bit and wondered if it was because he was old. No, even the 20 year old hurt after waddling around hunched over in freezing temperatures for a couple of hours.


  • This comment in the context of a guy bombing other people’s IVF attempts? It’s a valid choice to opt out for oneself, it’s certainly not valid to force others to opt out.

    Somewhere in the middle are the folks that take any opportunity to talk about how they think anyone having a kid is highly irresponsible, standing in judgement of people who have even one kid.

    I don’t care if you want to refrain from kids and stand by that decision. Closest I’ll come to not minding my own business is to mention that people can change their minds, so you may want to hedge your bets with something reversible like an IUD instead of a hysterectomy, but ultimately you may stand by the decision and that’s all your business.



  • Walmart is garbage, but the claim they can eat 30% tariffs because they made billions is by itself not a credible argument.

    They made 16 billion in profit, on the back of 650 billion in revenue. Percentage wise that’s 2.5%. The acquisition cost of the goods is a fraction of their operating costs, but if cost of acquiring the goods was even only 10% of their revenue, the tariffs are enough to push them red.

    If he is right then I would expect a nice analysis of the financials of Walmart showing this is feasible, rather than a hollow rant.

    Alternatively, if it were as he stated earlier temporary pain like medicine to fix the manufacturing imbalance, I would want a more coherent strategy. As it stands, businesses can’t plan around his tariff policy as it shifts day to day without warning. If they did bring home manufacturing at significant expense, they lose because Trump gives in and competition that didn’t bother has an advantage.



  • That seems convoluted but also as stated it wouldn’t be a wash.

    A deduction means pretend that portion of income never existed and the taxable portion of it is not charged.

    Then generally the deduction has to be above the standard deduction to make sense to use, and the standard deduction is just so high nowadays.

    So if you claimed a hypothetical deduction of 1,000, then you reduce your tax burden by only 200 or so, assuming you otherwise had like 20 some odd thousand in deductions to get you close to the standard deduction.

    The only way it would be a wash is if it were a refundable tax credit with no qualifications, and that almost never happens for anything. I could imagine a non refundable credit that would make it a wash for anyone with sufficient tax liability.

    However, this would make the tariffs an utterly pointless needless complication, needing a whole lot more accounting by sellers and consumers just to get to a similar and simpler position of not doing the tariffs in the first place.


  • I wonder if the overall thinking is that people need to feel progress to feel good about their lot in life but they can’t constantly deliver that, so they need the political “heels” to come by make things feel worse and then cede to people to make it “better” to make people feel like progress is made

    Kind of like how the net result is increased tariffs but because they were temporarily more severe, the general reaction is “the tariffs are gone, what a relief”

    Rolling that boulder up the hill requires it roll back downhill so people can cheer it being rolled up the hill again.


  • Sure, you could do something like that to normalize all manner of passwords to a manageable string, but:

    • That hash becomes the password, and you have to treat it as such by hashing it again server side. There’s a high risk a developer that doesn’t understand skips hashing on the backend and ends up insecurely storing a valid password for the account “in the clear”

    • Your ability to audit the password for stupid crap in the way in is greatly reduced or at least more complicated. I suppose you can still cross reference the password against HIBP, since they use one way hash anyway as the data. In any event you move all this validation client side and that means an industrious user could disable them and use their bad idea password.

    • if you have any client contexts where JavaScript is forbidden, then this would not work. Admittedly, no script friendly web is all but extinct, but some niches still contend with that

    • Ultimately, it’s an overcomplication to cater to a user who is inflicting uselessly long passwords on themeselves. An audience that thinks they need such long passwords would also be pissed if the site used a truncated base64 of sha256 to get 24 ASCII characters as they would think it’s insecure. Note that I imply skipping rounds, which is fine in such a hypothetical and the real one way activity happens backend side.





  • Actually it’s a pretty bad problem to have. If you bought an affordable house at the time but gentrification comes for your area you suddenly can’t afford to live in the house you bought and despite whatever roots you’ve put down, now you have to try to migrate somewhere else.

    Note that even if your tax assessment says you can get a few million out of your house, it’s likely not that easy, it can take a long time to find a buyer in the best of times, I imagine especially if you are seeking a buyer willing to pay millions…

    It’s not as bad as renting in the same scenario, but it’s not great to suddenly have rich person cost of ownership come at you when you bought into a non rich person level house


  • jj4211@lemmy.worldtomemes@lemmy.worldAI memes suck
    link
    fedilink
    arrow-up
    8
    arrow-down
    1
    ·
    3 days ago

    Actually it wastes very little of his time compared to the time wasted by people that would try to read it. That’s precisely one of the most frustrating things about LLM, easy to flood a reader, no easier nor more interesting than the short prompt used to make it would have been instead to read.