Notices by mhoye (temporarily spooky) (mhoye@mastodon.social), page 5

I'm not bothered that the same crowd that was happy joking about feeding people to alligators wants us all to act as though this wretched monster who died from the exact policies he championed should be somehow go unmocked, mourned and valorized. That's expected, there's nothing new there.

I am bothered by the people I expected to know better doing just that.

Proposal: put “Participating in the violation of posse comitatus” on the books as a felony.

This is fascinating, and raises a promising but ominous point: what happens when computers are entirely good enough?

https://gauthierroussilhe.com/en/articles/how-to-use-computing-power-faster

so are there any good phones now

Infosec lazyweb: a question about a mental model.

I’m apparently in the extreme minority on this but I think - setting aside that SMS-the-data-layer is very bad, SMS-the-authentication-process is very good actually.

"These numbers sent were sent to me via a different channel" is easy enough to use, but more importantly easy to see why it's separate and understand why that matters.

I also think if your 2nd factor lives in the same device as your password manager, you don't have 2FA anymore.

Truly blessed to be sitting at a patio window with a warm cup of coffee, watching the sun rise and thinking about how I was absolutely, totally right about NFTs the entire time.

@Gargron Signal is in a sweet spot between "not SMS" security-wise and "basically SMS" utility-wise, with the added benefit of "not owned by an adtech-surveillance org". An inexpensive, accessible-for-developers 2FA option for site owners would (I believe) both be a net improvement in security and drive signal adoption.

Dear @signalapp I am begging you to become a 2FA provider, please try to money by becoming a 2FA provider.

Unbelievable.

@emma but like… complying with what? There’s no mandates about it anymore, so…

People who pull down their masks to cough should be incarcerated.

Five years in I’m in a hospital lobby, one of the minority wearing a mask at a place people almost never go unless they’re sick, and it’s not so much the non-maskers but the chin-strappers that get me. What do you think you’re accomplishing.

Called 311 to report what looks like dumping; pretty great conversation, talking them through finding it on gmaps.

"Sir, there's ... not a road there."

"There is, I promise. Try satellite view."

"Sir, I don't see... uh, what? How?"

"I know."

@futurebird I’ve been thinking that there’s a lot of overlap between dirt-cheap discount-good dropshippers and llms in code, in that they sell you something that’s superficially similar to what you want, about the same shape as an answer to your problem that ultimately won’t stand up to real-world use.

I mean, look at this nonsense. For ten minutes twice a year Hawaii is rendered on a PS2?

TIL that twice a year Hawaii looks badly rendered for astrophysical reasons.

Wondering if I should set up my own phone tree answering service for all the usual calls I get. You’ve reached the Hoye household. To try phishing for my bank credentials, press 1. threaten a Chinese senior citizen, press two. If you want to help me with my website, press three. For all other callers, please stay on the line while I play a recording of me saying nope, can’t hear you, try again nope on repeat forever, or press zero to also get that.

Uh.... Maybe Google's whole sideloading restriction is because the number of developers releasing things through the Play Store is going off a cliff?

Candidate for the Modern Tools list: Superfile, a text-based file manager.

https://github.com/yorukot/superfile

https://www.ic3.gov/CSA/2025/250827.pdf

A remarkable Joint Cybersecurity Advisory from ... every intelligence agency in the Western world, warning about pervasive Chinese attacks and their success in achieving persistent access.

But if you go down the list there's nothing exotic or even interesting in it. No zero days, no supply interdiction, it's all "companies did not patch CVEs on time", and those CVEs are all "programmer did not sanitizing their inputs."

For fuck's sake, people: wash your hands.