Nick @internic@social.cleverlibre.org

@JoeUchill @GossiTheDog Oh, I figured that would be called Grokchain (probably some hideously inefficient AI implementation via smart contracts) and then you sell it to Elon Musk, since it would be peak techbro.

@rdviii I can tell you that I use a different one for GitHub, suggesting that you can use any authentication app that implements standard TOTP (which is defined by RFC 6238). A few apps I've seen recommended are Duo, Authy, and Aegis. I've used Authy and it does the job with no annoyances I've encountered (just make sure you disable adding additional devices to your account if you don't immediately need to do so) or you could go with something like Aegis if you prefer open source.

@filipw I was really excited to see the wider adoption of #Webauthn for #authentication online to facilitate really strong authentication for those who wanted it, but unfortunately I feel like the #Passkey hype will undermine that and instead push the industry to adopt a less secure option that works to tie people even more tightly to the walled gardens of a few major players. #2FA

@rdviii Which is GitHub's recommended authenticator? It looks like they just use standard TOTP, which case there are lots of options. Or do you mean GitHub Mobile?

@albertcardona I think the issue of persistence of conversations will be relevant to such users when they switch devices (since it stinks to lose all the history of your family/friends group chats), and even for not-very -tech-savvy users if they have something like a tablet then the device linking comes up (since this works pretty well with iMessage and even reasonably well with SMS on android). @steveroyle @signalapp

@emmadavidson Right, unless he's also born in the course of the movie, which would be an interesting choice. @drskyskull

@steveroyle @albertcardona @signalapp I honestly have been loathe to try because of certain behaviors of Signal (such as other devices frequently coming unlinked and conversation histories not showing up on other devices) that degrade the user experience, presumably in favor of greater security. If it allowed one to tune some of those behaviors to fit the user's own view of the trade-offs it would make it easier to sell folks on, I think. Of course, I recognize that means extra development work.
@steveroyle @signalapp

@fastmail It has been reported recently that governments are spying on the push notifications sent to users. It sounds like this can be mitigated in multiple ways, including encrypting the contents of push notifications. What measures does #Fastmail take, if any, to ensure the confidentiality of push notifications in its smartphone app?

https://www.wired.com/story/apple-google-push-notification-surveillance/