• 28 Posts
  • 67 Comments
Joined 1 year ago
cake
Cake day: July 11th, 2023

help-circle




  • Typically, people aren’t always bored, because otherwise, you are basically emotionally flat and depressed and soon will be suicidal. Have you seen kids that say they are bored? It just means they are not doing anything that interest them.

    To get “unbored”, you most likely need to be doing something that is fun, and/or meaningful, and/or enjoyable, and/or worthy, and/or essential to survival (in a way, people who are bored may be having it too easy). It may be better to be doing something productive, personally or socially, than doing something just addictive.

    Even being still meditating is doing something (like actively paying attention to the breath).





  • There are two types of passkey. Syncable and device-bound. (see https://fidoalliance.org/passkeys/). Theoretically, the device-bound passkeys never leave the device and users don’t have any access to it except to use it for authentication. The syncable type will first and foremost be synced by the platforms themselves (Google, Microsoft, and Apple), but eventually the 3rd-party password managers will be allowed to be sync providers, but possibly only on newly-released OSes.

    As far as I know, the passkey implementations currently on Android and Windows are device-bound; they are not synced to the cloud.






















  • TLDR;

    In November 2022, LastPass, a password manager service, suffered a data breach in which hackers stole password vaults containing encrypted and plaintext data for over 25 million users. Since then, there has been a series of cryptocurrency thefts targeting individuals in the tech industry, totaling more than $35 million. These thefts primarily targeted individuals deeply integrated into the cryptocurrency ecosystem, including employees of crypto organizations and venture capitalists.

    Researchers, led by Taylor Monahan, CEO of MetaMask, have identified a common factor among these victims: they had previously used LastPass to store their “seed phrase,” which is a critical private key for accessing their cryptocurrency investments. Armed with this seed phrase, attackers can instantly access and transfer the victim’s cryptocurrency holdings.

    The LastPass breach exposed vulnerabilities in its security, particularly related to the master passwords and encryption settings. LastPass users who stored important passwords, especially for cryptocurrency accounts, are urged to change their credentials immediately and migrate their crypto holdings to offline hardware wallets. Alternatives like 1Password, which offer additional security layers like a Secret Key, are recommended.

    While the research suggests a strong link between the LastPass breach and the cryptocurrency thefts, it’s challenging to definitively prove causation. Nonetheless, security experts advise taking immediate action to protect digital assets.