I’m 99% sure that I found a public consumer-facing website that is using and enforcing Passkey attestation.

Does anybody want to hazard a guess as to which website?

when the PR I’ve been working on for weeks is ready, all comments addressed, all conflicts resolved, and it just needs one more reviewer to sign off:

not to get all Huang up about it, but…

RE: https://chaos.social/@manawyrm/117563903189047149

Happy Cybersecurity Awareness Month Expansion Pack Month!

I have an old Google account that got hacked, but Google's login protections are super paranoid about it.

I just had the weirdest login flow ever.

1. Laptop shows a QR code to scan on my phone
2. Phone opens to the Google login screen and has a button to compose a SMS
3. The button switches to Messages app to send a message that says "Send this message without editing. (<random code here>)".
4. After sending the SMS, the mobile login screen says to continue back on my laptop
5. Laptop continues the login flow. (It then locked me out because Google don't like me and have now 'deleted' the account)

What sort of threat model are the possibly looking at where phone number ownership by OTP isn't enough, they need to _recieve_ a message from my number?

Are they worrying about phone malware or other interception?

They can’t count that high

RE: https://vt.social/@lina/117477414659891885

oh joy. 🍿

RE: https://cloudisland.nz/@yaakov/117476480451000125

I feel like I tortured my spreadsheet.

I don't know why I made this, but I did.

You know your energy provider has refactored their code a bit too much when your gas plan offers a solar feed-in tariff.

What am I supposed to do, capture hydrogen from the sun and shove it back into the pipes?

Avoid the M80 rn

I think my SIM actually died. After a long back and forth with my carrier I’ve managed to switch to an eSIM and now all is good.

Is anyone else on iOS 27 beta getting a SIM Failure error in the last 24-48 hrs?

The ATO phone line is so funny.

It asks for your date of birth and tax file number, then once you’ve done that and progressed to the phone menu, one of the options it gives you is to look up your tax file number.

You know, the one you just entered. 👀

Whoever is developing the software for my GP’s practice must be drunk.

Last month when I was here they had an online check-in system where scanning a QR code takes you to a web form. Cool, fine, whatever.

Today there’s a different QR code which has you join their wifi network, which has the check-in web form as the captive portal.

What the heck?!!???!?

Thank you for your generic email, store.

the existence of cos lettuce implies the existence of sin lettuce and tan lettuce

I thought perhaps they had finally fixed wifi on Linux but my card’s firmware keeps crashing after running for several hours. 😕

I’m at the football game.
I’m at the Wiggles concert.
I’m at the combination football game Wiggles concert.

Fire alarm at Southern Cross station. They’ve just triggered an evacuation.