My avatar is the Fuzzbomb from the 1980s children’s educational PC game Agent USA for no particular reason. You can play it in your browser here.

  • 2 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: July 9th, 2025

help-circle

  • Nitpick: the author seems to be under the impression that attestation occurs at login, but what I remember from reading A Tour of WebAuthn is attestation can only happen when a credential is created. In the case where Xitter wants to prevent you from logging in from Lineage OS, the effect is broadly the same. The difference is, instead of Xitter refusing login, either (a) Xitter refuses to create an passkey login option for you if the device does not offer attestation or if the attestation indicates the device could later expose the credential to an “insecure” operating system OR (b) the device simply can’t have Lineage OS installed at all or erases the credential or prevents Lineage from accessing the credential while Lineage OS is running.

    I’m also not sure if governments or government agencies being members of the FIDO alliance is an indication of nefarious intent. Their intelligence agencies engage in offensive operations, but are also interested in defending their countries against cyberattacks, yes? Moreover, the NSA is not a member. NIST is, but NIST is a standards body, not an intelligence agency.





  • If you ask an LLM for Pong, it will give you Pong, or rather a Pong, a simulacrum average of all the Pongs in its training corpus. But it won’t be your Pong. You will not have decided the color, shape, and size of the paddles, or the background color, or speed of the ball, or the language it’s written in, or the way to architect the code, or any of the other aspects, so many that they can’t be enumerated. It’s not possible to describe exactly what you want to the LLM because that would be the code itself. Anything short of that and you will have omitted something, forcing the LLM to make a choice all on its own. Write your own damned Pong.