This is actually a terrible take. Passkeys provide a very large security benefit over passwords and have an open standard.

It’s particularly ridiculous that they seem to think TOTP good passkey bad. They solve the same problem: symmetric persistent encryption like passwords is very weak. TOTP solves this my making it not persisting and passkeys solve this by making it asymmetric. Passkeys are mildly more convenient because you don’t have the copy a code over.

Both also have the same potential for abuse, any service could require you use their specific app. The fact that this article makes it sound like TOTP is a perfect open standard while passkeys are a Trojan horse for abuse is ridiculous. If most services are using the open standard for TOTP why wouldn’t they for passkeys? Also not all services do obey the open standard for TOTP. I’m sure I’m not the only one who was forced to install the duo Authenticator because their institution was somehow sold on their protocol being stronger than the open standard.

TOTP and passkeys are comparable and both with doing.

Real. I joined it cuz it said it was FOSS focused and run by the creators of Lemmy which I thought was neat. Did not realize it was a tankie cesspool. I’m now banned from a good portion of it for “Nazi apologia” because I said calling Ukraine Nazis was Russian propaganda

Right thanks for the reminder

You may be new enough not to have encountered this yet but our instance has a well earned reputation of being Soviet boot lickers. Be careful on .ml meme subs and stuff, you’ll catch a permaban for saying anything pro Ukraine or in any way interpretable as anti Russia

Same actually

Thanks… unfortunately I’m well aware that’s a low bar lmao

Totally agree on the privacy sovereignty front. I suspect in the long run personal tasks will be handled by local models for this reason. I guess I’m thinking more on the scale of institutional compute. Just like every large university has their own super compute cluster I expect them to want their own AI instance (I know companies like Amazon already have such a thing) and in those instances the gap in skill really matters and these institutions are willing to pay a fair amount for the best out there.

Also I can’t speak on equivalence with frontier models 3-4 months ago because I didn’t have access to paid models back then but if that’s true and not just bench maxxing then it means the moat is widening not shrinking. Which suggests these labs are in a good position to make themselves an asset the US cannot afford to lose despite their comically costly business model.

Can you explain more what you mean by this? For a bubble like the internet I can understand the giants failing and new companies picking up the pieces because the technology was already available to everyone so there was no real moat for new companies entering the space which feels quite different from the AI situation no? I’ll admit I wasn’t alive in 2000 so I don’t know exactly how all that went down.

Yeah Qwen 3.5 122B-A10B. It’s the most capable model I’ve found that I can run on my machine. It’s useful for simple tasks but honestly it’s around the border if correcting/checking its works is comparable effort to doing it myself. So I don’t really use it in reality it’s more a novelty. I’ve also messed around with Kimi K3 since the benchmarks said it was awesome. It’s definitely a league above Qwen but must be benchmaxxed to hell cuz it’s not even close to the same league as opus (I can’t speak to OpenAI models as my team has a Claude account so those are the paid models I know)

The web interface is hosted directly by your vaultwarden interface so it’s not lockdown-able. The only things that are would be the browser extension and phone apps. Both of which are formally unnecessary because you can always just use the web interface. I’m sure if they ever locked down there’d be community versions in no time as they’re basically just web wrappers anyway.

The web app keeps a local synced copy too btw. Biometric is fair tho

I run a 122B model locally. I love local models. If you think they’re anywhere near as capable as the data center models you’ve either not tried them or are lying to yourself

I truly can’t see the bubble bursting at this point. They’ve won their race and built a technology so impressive it cannot be ignored or dropped. AI dominance is now a matter of nations (cyber) security. As soon as they’re any real chance of these labs failing they’ll be a tax payer bailout. I just hope it also results in nationalizing the leading AI labs so the models build on public knowledge can be forced into the public domain where they belong

The “want to learn” is gonna carry a lot of weight here but I think and arch based distro like cachy works well for this. Cachy was my first distro and I really wanted to learn so it gave we a working starting place from where I could tinker and replace parts one at a time until they fit my liking. If I were to reinstall today I’d do plain arch since I know what I want and don’t need Cachy’s defaults anymore. Obviously everyone has their preferences but I think cachy is a really solid approachable distro for beginners, there’s a reason it just passed steamOS to claim the throne of most used distro on the steam hardware survey

As a developer I love rust but canonical can fuck all the way off with this shameless license laundering.

Because Canonicals real goal is to move Ubuntu entirely to corporate friendly licensing under the pretense of migrating to rust. Obviously they leave the original untouched, it’s a matter of adoption. Without the oxidization argument nobody would have gone along with Ubuntu just deciding to do a clean room implementation of gnu tools in corporate friendly licensing, by making it about oxidation they are able to manipulate a large portion of the rust community into contributing/supporting their license laundering.

I was gonna try to defend my comrades for not being that brain dead then I saw the only other Lemmy.ml guy on this thread actively proving your point lmao

Do I get to stress if it’s happening to me and my neighbors in my country perpetrated by my government?

Yea know that is a fair point. I guess I struggle to see any other reason to support this? Even though I believe rust is nominally more secure it’ll be a decade before any core utils clone will be as hardened as the original just by virtue of the original having decades of bug finding and fixes done already.

I don’t think canonical would go through the effort under normal circumstances but I think they’re just taking the opportunity in front of them to ride the rust hype into a less copyleft ecosystem.

This actually ties into a broader complaint I have that the rust ecosystem is built around MIT due to influence of the corporate backers of the rust foundation. Which is unfortunate because I actually really love rust as a language.

Uh call it whatever you want but canonical pouring money and resources into development of corporate friendly licensed clones to existing tools so they can avoid copyleft restrictions in the future is not good. I never understand when people feel the need to defend corporations obviously harmful behavior.