• 0 Posts
  • 85 Comments
Joined 2 years ago
cake
Cake day: June 29th, 2023

help-circle


  • I think it’s a bit more hopeful than that(America is still fucked short term, but humanity might be better off long term). Throughout history, people have been misinformed idiots that don’t think critically. It’s just that prior to about 2008, people didn’t really have access to the deluge of information that is social media and we’re still trying to figure that out.

    The reason misinformation on social media works so well is that people want to learn things, and if someone tells them a believable enough lie, they’ll take that as fact doing only minimal checks(eg: my friend whom I trust shared this article saying that it’s the Mexican’s fault I see so many homeless people, so it must be true).

    Stuff like this has happened throughout history. People published absolutely insane things in books and presented them as fact for hundreds of years, and it set back things like science and medicine for equivalently long, as people didn’t fact check things then either.

    The fact that people are already hammering on about trying to fact check social media means that people are educated enough now to start, and we as a species just need another small push in that direction




  • For me, it was a number of things that all came about through my 20s. The biggest were learning both how and when to tell people “no”, and making a conscious effort to think proactively rather than reactively.

    What I mean by that is don’t take on extra work only because someone asks you to, and if something goes wrong, only worry about it if you can actually do something about it. Both of these are skills that require practice.

    Also, as others have said, think critically if it might just be a shitty work environment. If that’s the case, consider looking for other work while keeping this job.














  • I’m not sure I necessarily agree. Your assessment is correct, but I don’t really think this situation is security by obscurity. Like most things in computer security, you have to weight the pros and cons to each approach.

    Yubico used components that all passed Common Criteria certification and built their product in a read-only configuration to prevent any potential shenanigans with vulnerable firmware updates. This approach almost entirely protects them from supply-chain attacks like what happened with ZX a few months back.

    To exploit this vulnerability you need physical access to the device, a ton of expensive equipment, and an incredibly deep knowledge in digital cryptography. This is effectively a non-issue for your average Yubikey user. The people this does affect will be retiring and replacing their Yubikeys with the newest models ASAP.