Cryptographic analysis from ETH Zurich researchers Jonas Hofmann and Kien Tuong Turong revealed issue with Sync, pCloud, Icedrive, Seafile, and Tresorit services, collectively used by more than 22 million people. The analysis was based on the threat model of an attacker controlling a malicious server that can read, modify, and inject data at will, which is realistic for nation-state actors and sophisticated hackers.

Interesting stuff, but it’s worth noting the scope and circumstances.

Right, making it look like you know what you’re doing is a great way to advance to the point where you cause real damage. I’m glad you don’t have to do that, and aren’t getting trampled by the people who do.

Oh, uh. I’m wondering if I laid the irony down too thick. I think the comment you originally replied to is probably correct. I think your questions are typical escape hatches for men to be blameless in any situation. I can imagine you didn’t mean them that way, but that’s what’s usually meant by them.

You’re absolutely right. The most likely scenario is that the person with first-hand knowledge misinterpreted the situation. These poor men and their sensitive feelings…

Irony aside, I’m sure it’s a complex situation with different relevant points to any perspective, but the events as told line up with my own experiences.

I’ve witnessed many of the kinds of situations described here and I think the proposed mechanics adequately explain them.

He grows more powerful by the day…

I can’t watch yet, but I have to know: how angry is Steve?

I think of that like putting multiple things in the same basket, but putting two locks on that basket.

I’m not evaluating whether or not you should do that, but, assuming you trust your partner and their op sec, you could send them the secret via a disappearing message on Signal or some other E2E encrypted communication method.

You set it up on your key, they add it to theirs later, the secret disappears into the ether.

All it takes to sync TOTP is to manually set up the secrets on all keys.

Keeping a second factor in a password manager makes it a single factor, doesn’t it?

You need to get out more. I totally get that you would think that’s the case, but only if you’re not exploring parts of the internet outside your bubble. It’s absolutely written.

People deleted the content they had access to. As protesting subreddits went back to being public, the content they hadn’t been able to delete became visible again.

Sure, but also the broader “join my Patreon to get access to my Discord server” market. It’s actually a pretty clever move, if there’s a market for it (there is) and if it replaces more insidious revenue streams (it won’t).

[feverishly applauds]

Yes! Hahaha, it’s so good.

Number 2 needs to flick the little switch on the SD card.

[flashbacks to the backlog being wiped out because “the client already signed off on the release”]

Wasn’t there a story about people calling curl devs because of car issues?

For what it’s worth, I’m sure the SQLite devs could help somebody clean up their temp files. They just really shouldn’t have to.

Or “How Signal is closer in functionality to WhatsApp by the day, because it turns out people like the functionality of WhatsApp.”

Yeah, I’m all about Jetbrains in Night theme. Thanks for the alt text, by the way.

First it needs to work, then it needs to work well, and finally it may or may not work quickly. Along the way, it should also be humorously weird.