You are presenting a false dilemma (probably unintentionally). While security can be at odds with usability, basic measures like password generation and management are a solved problem. In fact using password manager is more convenient than typing password manually, even 123456 :)

Unless of course, you need to unlock your password manager, which is not integrated with your browser, because corporate IT doesn't allow browser extensions or desktop apps so you're bound to a web app ...

Until security forces the password manager session to expire after 1 hour, and forces the master password to be 16 char long with a combination of lower, upper, digit, punctuation, moon phase, astrological sign. And then they force you to change it every 2 months, and you can't reuse it until the next time Halley's comet is in the solar system.

You're missing the systemic problem the parent is talking about.

None of those hypotheticals apply in a company where "123456" was allowed as a password to begin with.

And if even if they did, which of these two is easier?

1. Typing your 16 char password with the current moon phase once an hour, and remembering the new one every time a comet passes

2. Pressing your password manager keyboard shortcut (or tapping your yubikey) once an hour, the exact same action that never changes for the rest of your life

> None of those hypotheticals apply in a company where "123456" was allowed as a password to begin with.

True.

> And if even if they did, which of these two is easier?

You didn't understand their point. The password manager itself locks and tapping doesn't work until you put in the master password again.

The fact that password managers can be implemented badly, doesn't mean we shouldn't implement them well.

Yes, but at the same time we need to remember that "password manager" can only do so much if reducing friction isn't a priority.

Ha, I don't need to type 123456, it's stored in my navigator's password manager for convenience. Checkmate.

I don't type 123456 either. I stop at 5.

It’s worth noting that they still had to kidnap the princess to find out the password. It could have been anything and wouldn’t have made a difference, it’s still vulnerable to the $10 wrench.

But the password for the password manager can also be 123456...

And will be, if it's something trivial like the nuclear arming codes.

Or if your boss has pointy hair.

Next step in typical security team fashion: Prevent password managers from working, by obscuring the password field, using click-to-type passwords or similar shenanigans, because fuck you, that's why...

You need a better team

We can't have nice things.

Related: https://adc.org/case/blumenthal-v-mullin/

Such a lovely article. Thanks for sharing.

HDMI is a king on consumer TVs. Linux (in form of SteamOS) is becoming a major console gaming platform thanks to Valve.

Local control, maybe. But not the power.

  Location: Eastern Europe
  Remote: Yes
  Willing to relocate: Yes
  Technologies: too many to list here, backend/opensource primarily
  Résumé/CV: Reach out and I’ll send a detailed version
  Email: [email protected]

Infrastructure operator and developer with 15 years of experience.

Somewhat related, new version of Amiga Vision collection just dropped. Very high quality product you can get for free if you are an Amiga fan. Can't get enough of included demos on my MiSTer setup.

>LLM tech as it stands right now will turn into a commodity

I am yet to see in-depth analysis that supports this claim

It's already a commodity. The strongest use case is self-hosted pornography generation.

>How would u setup a child's first Linux computer?

preloaded with tons of stuff my kid might find cool (depends on his or her interests which nobody knows better than I do), and with completely disabled internet access if kid will be using it without my supervision.