• 1 Post
  • 264 Comments
Joined 1 year ago
cake
Cake day: July 14th, 2023

help-circle

  • White straight able bodied men age 25-64

    25-36 is still “young” by their definition.

    and a union doesn’t exist in their industry (as far as they know)

    It doesn’t matter what industry you’re working in if you’re interested in that industry having a union. Making unions more commonplace was part of the point. The second sentence in the Union Members and Families section reads “Democrats will make it easier for workers, public and private, to exercise their right to organize and join unions.”

    But sure, if you don’t believe unions have value, this wouldn’t include you.

    Fuck 'em lol. Wait are they religious, rural, a business owner, or a veteran? No? Ok yeah fuck 'em!

    You and I must have different definitions of “fuck ‘em,” because I clearly said:

    Economically, Democratic policies favor poor and middle class people, which statistically makes up the majority of all white men. And there aren’t any policies that oppress white people or men the way that Republican policies oppress women or reduce support for all of the groups that Democratic policies help support.

    So sure, if you’re a white man with wealth that puts you in the top 1%, the Republican’s economic policies will be better for you. For the other 99% of white men - no. And for the specific issues called out in the original post linked (on Reddit):

    1. Men account for 75% of suicides in the US
    2. 70% of opioid overdose deaths are men
    3. Men are 8 times more likely to be incarcerated than women
    4. Young men are struggling in schools and are increasingly the minority at universities, opting out of higher education
    • 1 is addressed under “Investing in Mental Health” in the Party Platform as well as indirectly by gun safety policies (since 50% of suicides are by gun, 60% of gun deaths are suicides, and 87% of gun suicides are committed by men)
    • 2 is explicitly addressed under “Faith Community (“respond to the opioid crisis”) and under “Beating the Opioid Epidemic” in the Party Platform.
    • 3 is addressed under “Criminal Justice” in the Party Platform
    • 4 is addressed in multiple ways, under “Good Jobs” (“you shouldn’t have to go to a four-year college to live a good, middle-class life.”) and under “Education” (investing in K-12 education, providing free, universal preschool, investing in other forms of secondary education - e.g., trade schools, community college, registered apprenticeships)

    Democrats need to work on their messaging, obviously (and the comments on the Reddit post touch on that), but the problem isn’t that their policies don’t help white men, because they obviously do.


    • Young white men are included under “Young People and Students.”
    • Old white men are included under “Seniors and Retirees.”
    • Many white men have disabilities and are covered under “Americans with Disabilities.”
    • Many white men are covered under “LGBTQ+” - trans men, gay and queer men. Heck, some even include allies under the umbrella.
    • Many white men who are neither young nor old (or members of their family) are members of unions, or would like to be, and thus covered under “Union Members and Families.”
    • Likewise, many white men are covered under:
      • Faith Community
      • Rural Americans
      • Small Business Community
      • Veterans and Military Families

    Economically, Democratic policies favor poor and middle class people, which statistically makes up the majority of all white men. And there aren’t any policies that oppress white people or men the way that Republican policies oppress women or reduce support for all of the groups that Democratic policies help support.

    In other words, unless you get off on the oppression of those groups, almost all white men are served by the Democratic party, even if they can’t find themselves on the list you shared.

    “Black Lives Matter” was a response to black men and women being murdered by police at higher rates, of the news stories of those deaths being under-reported by comparison, and of the victims being blamed more than people of other races, particularly white people.

    “All Lives Matter” as a response to “Black Lives Matter” missed the point. It’s “Black Lives Matter, too.” If all lives mattered, people wouldn’t have needed to protest the killings of black people in the first place.

    Imagine if you were at a restaurant and everyone around you got their order but you, so you said “Hey, I need my order.” If the server responded with “Yes, everyone needs their order” and walked off, that would be about the equivalent to saying “All Lives Matter.”

    So, is there a parallel between thinking that white men should be pandered to and saying “White Lives Matter?” Absolutely.



  • You can use yt-dlp to download Tiktok videos, and you can use it on both iOS (e.g., via aShell or Pythonista) and Android (e.g., via Termux).

    Once yt-dlp is installed, you can run this command in the terminal app. It’ll be downloaded into your current directory:

    yt-dlp https://www.tiktok.com/@r_o_b__b_a_r_b_e_r/video/7392630187063627040
    

    Just replace the URL with the one for your desired video. The video URL should like the one I have below, though you don’t need to remove the query parameters - if it doesn’t you may need to Share, Copy Link, and use the copied link instead of the URL bar. This is especially true if navigating among tabs on the web or something.

    You may need to wrap the url in double quotes. IME it varies by device.

    On iOS there are Shortcuts that integrate with yt-dlp, and on Android you can do the same with Tasker and the Tasker - Termux plugin. Make sure to install the F-Droid versions.

    You can also save many Tiktok videos through the app’s Share dialog, though creators can disallow that content wide.





  • “But tante, then we will never have Open Source AI”. Exactly. That’s how reality works. If you can’t fulfil the criteria of a category you are not in that category. The fix is not to change the criteria. That’s playing pigeon chess.

    This is a bad take. If your criteria aren’t grounded in reality, they aren’t useful, so of course you should change the criteria.

    It’s also a missed opportunity to point to an AI model that did things right and that would qualify as “open source AI” even if that definition were not watered down. For example, OLMo (which I just learned about) says that they provide full insight into the training data as well as “full model weights, training code, training logs, training metrics in the form of Weights & Biases logs, and inference code.” Their most complex models are 7B models, which is enough to be relevant.

    Saying “Meta and Alphabet will never release Open Source AI that meets the proposed definition” is fine. Saying “we’ll never have Open Source AI, period, that meets the proposed definition” means your proposed definition needs rewritten.


  • Your Passkeys have to be stored in something, but you don’t have to store them all in the same thing.

    If you store them with Microsoft’s Windows Hello, Apple Keychain, or Google Password Manager, all of which are closed source, then you have to trust MS/Apple/Google. However, Keychain is end to end encrypted (according to Apple) and Windows Hello is currently not synced to the cloud, so if you trust those claims, you don’t need to trust that they won’t misuse your data. I don’t know if Google’s offering is end to end encrypted, but I wouldn’t trust it either way.

    You can also store Passkeys in a password manager. Bitwarden is open source (though they did recently introduce a proprietary, source available SDK), as is KeepassXC. 1Password isn’t open source but can store Passkeys as well.

    And finally, you can store Passkeys in a compatible security key, like the YubiKey 5 series keys, which can each store 100 Passkeys. This makes them basically immune to being stolen. Note that if your primary interest in Passkeys is in the phishing resistance (basically nearly perfect immunity to MitM attacks) then you can get that same benefit by using WebAuthn as a second factor. However, my experience has been that Passkey support is broader.

    Revoking keys involves logging into the particular service and revoking them, just like changing your password. There isn’t a centralized way to do it as far as I’m aware. Each Passkey is only used for a single service, after all. However, in the same way that some password managers will offer to automatically change your passwords, they might develop a similar for passkeys.






  • Do you memorize all of your passwords? If so, I take that to mean that you don’t use a password manager. Password managers - really, any app with 2FA - have this problem, too. But if you use a password manager and store your 2FA methods in it, then you only need to be able to regain access to your password manager.

    If you use a cross-platform password manager with Passkey support, like Bitwarden, you can use it on any of your devices. In the event that you lose all of your devices, if you don’t have an Emergency Contact set up, you will need your password and one of the following to gain access to your account:

    • Access to your 2FA method
    • Access to your Recovery Code
    • If you’re in an enterprise using Duo 2FA, access to a Duo bypass code (contact your Duo admin to request this)

    If you use security keys for 2FA, then you should have at least two - one that you keep with you and a backup that you keep in a safe place, like at home in a lockbox.

    If you use a TOTP app to log in, or if you use security keys and want another backup, then making sure you’ll have access to the Recovery Code should be your priority. You can write it down and keep it in a few different places - at home, in your car, in your locker at work, etc… You can share it with someone you trust in person or over an encrypted channel (like Signal). You can store it on a flash drive, encrypted by a second password (which can be much easier than your primary password) or even unencrypted, if you generally keep the drive somewhere safe, disconnected from your computer. As long as you remember your password and can access your recovery code, you’ll also be able to regain access to your account, including all of your passkeys.

    Emergency Access requires someone else to have access to their Bitwarden account, but assuming you don’t both lose access, it’s a pretty solid solution. When they request access, Bitwarden will send you an email allowing you to accept or reject their request. If you accept or don’t respond within the allotted “Wait Time” (which you configure: 1 day minimum, 90 days maximum) then they’ll be granted access. You also get a choice (when setting this up) to let them takeover the account (resetting your master password) or to just get read-only access.

    Maybe you don’t like Bitwarden and want to use some other app, like 1Password, Dashlane, Roboforms, etc… Whatever your choice, familiarize yourself with how to restore access to your account in an emergency. Then you only need to worry about that and not about how to get access to your passkeys that are on your Windows laptop or only synced to your Apple devices.


  • But that is exactly what he recommends, using a password manager - with one time email authentication for the first login as an extra step, right?

    Nope.

    Using a cross-platform password manager with synced passkeys is different and much more secure than using a password manager with email TOTPs or sign-in links with emails that aren’t end-to-end encrypted.

    And password manager adoption is much higher than PGP keyserver adoption, and if you can’t discover someone’s public key you can’t use it to encrypt a message to them, so sending end-to-end encrypted emails with TOTPs/sign-on links isn’t a practical option.

    According to Statista, 34% of Americans used password managers in 2023 (a huge increase from 21% in 2022), so it’s not even like the best case scenario is rare.


  • The author mentions it: the QR code approach for cross device sign in. I don’t think it’s cumbersome, i think it’s actually a great and foolproof way to sign in. I have yet to find a website which implements it though.

    The site doesn’t need to implement this; the browser handles that part.

    I confirmed this works and logged into Github using Google Chrome on my work computer using a passkey stored in Bitwarden earlier today. I had to enable Bluetooth for Chrome, since I’d had it disabled, but then everything else was seamless.



  • If I were talking about Passkeys and comparing them to client certificates, even though I don’t know much about client certificates in practice, I would say:

    • Passkeys can be installed in your password manager, which handles securely syncing it to all of your devices
    • Websites can make it very easy to create or log in with a passkey
    • Far more websites support passkeys
    • Websites can support multiple passkeys per user
    • The user experience is far better with passkeys
    • Even if your password manager isn’t installed on a given machine, you can still log in with a passkey via your phone, so long as both devices have bluetooth enabled. This allows you to log in on an untrusted device, like a library computer, without exposing your password (though unfortunately that would still result in that computer having access to the session and being able to modify account settings - best practice would be to log out when you’re done and then, from a trusted device, confirm that you were logged out / log out of all devices.)

  • Can I store a passkey in a platform agnostic way?

    If by “platform” you mean OS, then yes - and the best way to do that is to use a dedicated password manager instead of something that’s tightly integrated with an OS.

    That said, iCloud keychain is available on Windows, but not Android. Likewise with Google Password Manager - it supports Macs, but not yet support iPhones or iPads.

    However you can also use a password manager like one of these and use it across every platform:

    Based on my experience (with Bitwarden) or research, all support passkeys in browser extensions for Firefox and Chromium browsers and/or desktop apps on Linux, Mac, and Windows, as well as in apps for iOS and Android.

    Keepass also might be an option, as KeePassXC supports passkeys and is available on Mac, Windows, and Linux, but I didn’t see any mobile clients that advertise support for passkeys.

    Even with the more open password managers, there isn’t a built-in way to transfer passkeys from one password manager to another. However, the FIDO Alliance is working on a spec for securely transferring passkeys so hopefully that’ll change soon and you’ll be able to transfer passkeys from one ecosystem to another.

    Also, you can generally still log in on a device that your passkey service doesn’t support by scanning a QR code displayed on the target device on your phone, so long as both devices have Bluetooth (used for confirming physical proximity). I’ve only done that once and it wasn’t super streamlined, but it also wasn’t terrible. You can also save passkeys to your phone or security key (like a Yubikey) though be aware that a YubiKey 5 can only store 100 passkeys. And you can have multiple passkeys to a given service, so if you use a Mac but use an Android phone, you can save a passkey to iCloud Keychain on your Mac and to Google Password Manager on your phone.

    EDIT: Looked up and added the correct limit for YubiKey passkeys