if you run into anyone trying to discount the severity of the lastpass breach by saying the master keys are impossible to crack, ask them how lastpass' key derivation works, what a credential stuffing attack is, and how well PBKDF2 scales on GPUs.

given the details, it looks like anyone whose data was in the breach and who also reused their master password elsewhere is in imminent danger of having all their passwords compromised, as is anyone who used a relatively common password.

My least favourite sharp edge of Mastodon is the fact that when you view someone else's post you only see replies to it that are known to your server - so there's actually a good chance there will be replies that are completely invisible to you, especially if you run your own instance

I'd love it if tapping a post kicked off a request back to the original server that fetched the current reply count and provided a "view all replies" button if there were replies not yet visible to me

"Americans have real privacy concerns about their online data."

No. We do not.

If Facebook, Amazon, and Google's vacuuming of personal data hasn't proved it, TikTok surely closes the case.

We are happy to trade every scrap of private data, that we know will be used in problematic, unregulatable ways by a non-allied, semi-antagonistic, foreign govt in exchange for a more convenient source of short, entertaining videos.

A small, vocal few may care, but "Americans" broadly do not.

You will all be surprised that I've been thinking about MFA lately. 😂​

I asked @jerry for some infosec.exchange MFA stats a couple of weeks ago. The resulting exchange was interesting. I typed up some thoughts here:
https://medium.com/@boblord/mastodon-mfa-stats-96e271708f97

The summary is that we need to move responsibility for staying cyber safe from end-users to service providers. Nudges, sometimes aggressive ones, can be a powerful tool to achieve that goal.

I'd love to hear your thoughts so I can continue to learn and to refine my thinking. 🙏​

Corporate profits only accounted for roughly 11% of price growth from 1979 to 2019.

Today, record corporate profits account for 53.9% of price increases.

Folks, corporate greed is driving inflation, not workers asking for better wages.