Nick @internic@social.cleverlibre.org

@matt @lennyzeltser My own experience from the end user perspective is that often cybersecurity policy changes are formulated without taking into account many user use cases. As a result, they end up making it impossible for many users to accomplish their job functions while obeying the rules. People still need to do their job, so they end up developing workaround that are less secure that the situation before the new rules. The end result is worse security and a loss of legitimacy for security rules in the eyes or end users.

@Wintermute_BBS @thomasfuchs I guess what I don't understand is that it seems like someone could functionally implement QTs in a client, (e.g. with a screenshot of the post and a link), and with all the demand it seems like only a matter of time. It seems likely that would have all the downsides people fear but also take it out of the control of Mastodon devs. It that's true, then wouldn't it make sense for Mastodon devs to implement the least bad version of the feature instead?

@JenLucPiquant seems like a science-specific version of this XKCD.
https://xkcd.com/2347/

@bryanhansel @Devilstower Unless I missed something, I didn't read the OP as saying range was an invalid concern, only that cold weather impacts on EVs were overblown FUD and that ICE vehicles have range impacts too. I think the cold weather concerns are somewhat overblown, but a) EV models sold in colder countries are often different (e.g. ID.4 in Canada vs. USA), and b) I think you're correct that range impacts can become important in rural areas if infrastructure is already marginal.

@epixoip Thanks for posting a detailed summary. I have to say that I'm disturbed that I had read a number of reviews of password managers (that ostensibly covered security) and I had not heard of many of these, seemingly egregious, problems with Lastpass. Seems like a major miss by reviewers.

Among the most shocking to me is the use of ECB. I'm far from an expert, but I thought that was generally the canonical cautionary example of a bad way to use a block cipher when learning crypto, so I would have thought of that as an amateurish error. Am I missing something? Are there valid uses for ECB mode?

@Engraver219 The usual advice seems to be to add an avatar image and something in your bio, especially describing your interests here, and then make a post introducing yourself using #introduction

@deltatux @hacks4pancakes @keily_sdivx I agree that the ability to self host is good, and I didn't necessarily take you to be saying that everyone should.
It's just that often the focus in these discussions is on whether people have the skill to setup self hosting, and I guess my point is that securing and maintaining it is another thing entirely and, moreover, that *thinking* one can do the latter is not necessarily the same as actually being able to.

A trap we often fall into is feeling safer when we're in control, even if objectively it puts us at more risk. Added on top of that, I've met a lot of people who think they understand infosec but, in fact, only have an even shallower understanding than my own (as a non-expert).

@deltatux @hacks4pancakes I'm someone who probably has the basic skills to self-host (I have for other things), but I'm still really skeptical that it would be a good idea for people like me who are not professionals.
Being able to set something up is not the same as being able to secure it properly, keep it secure, and maintain availability. And my experience is that many people overestimate their knowledge and abilities in infosec (Dunning-Kruger).
For example, I know for myself that I'm unlikely to keep close tabs that my backup really restores, or know how to setup good intrusion detection, or stay aware of the latest 0-day exploits. For something critical like a password vault, it may be better left to people with more expertise who have this as their primary focus.

@Mizmar @conradhackett Now I want to know more about this cat.

@dimpase @Gargron You may be interested to know that some instances like the one I'm on (qoto.org) use a fork that already supports Markdown (as well as LaTeX).

@ruud Heads up to @freemo

@tryggth @amandagefter @JenLucPiquant But if EP=EPR were true then wouldn't all quantum computers (and various other systems with quantum entanglement) be producing wormholes all the time? I think the point is that this is no more creating an actual wormhole than any other quantum computer, but what is interesting is that it may be simulating a wormhole in a way that may have promise for probing ideas about quantum gravity.

@mustapipa It may be worth clarifying that they did not create a literal wormhole in spacetime. They basically used a quantum computer to simulate a process that is conjectured to have the same mathematical structure as something passing through a wormhole in 1D space.

@alceawisteria I was reminded of the PHD comic on the science news cycle: https://phdcomics.com/comics/archive.php?comicid=1174

@shuttersparks There is a mathematical argument that looking merely at the ratio of electoral votes per person is not the correct way to gauge the voting power of individuals. Based on game theory, there is an arguably better measure called the Banzhaf Power Index. I personally like the explanation here:

https://everything2.com/user/kthejoker/writeups/Electoral+College

Note that in this analysis voters in larger states still generally have more power despite the lower number of electoral votes per person.