• 1 Post
  • 44 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle















  • Not necessarily. I can’t imagine they’d want you to login to your iCloud or Google account on a public computer. It will probably work how Microsoft “Authenticator” works or how when you try logging in to iCloud or your Google account when you have 2FA turned on:

    1. Type in your username and click submit on the library computer
    2. The service on the computer tells you to look at your phone
    3. In the background, the service sent an encrypted challenge to your iCloud account
    4. All your devices receives a notification asking if that’s you trying to login
    5. You pull out your phone, click yes
    6. In the background, your phone decrypts the challenge and sends it back to the server
    7. The server verifies its you who is trying to login and logs you in on the library computer

    No sharing of keys necessary

    Edit: that was just a guess and there are likely a few ways logging in can be achieved on a public computer without needing the private key on that computer. My knowledge on passkeys is surface level, I haven’t really taken the time to look deeply into them yet


  • but I will not pay for YouTube.

    I consider letting ads play or paying for a subscription ‘paying for YouTube’. So I’m curious as to why you wouldn’t?

    • We obviously both agree that creators should be paid

    • I think we can agree that YouTube should be paid something. They host the content, the replication, the back ups, and they provide a single location for viewers to aggregate which helps all creators find new viewers. That is expensive to do and is valuable for creators

    Is it the amount of ads they play, the amount they charge for premium, the revenue split doesn’t give enough to creators, or something else?


  • Point taken. I should have said something along the lines of:

    probably continue to squeeze more and more revenue…

    YouTube isn’t innocent in this but I think a lot of that censorship has been brought on by sociopolitical changes in the last ten years. The further extremes on each side have gotten louder and social platforms are being used to spread their ideas. YouTube is caught in the crossfire on that and instead of doing the right thing, they just censor everyone


  • Someone else correct me if I’m wrong but it works similar to PGP.

    Background info:

    • Your device generates two keys, a private key and a public key
    • The public key can be given to anyone and the private key stays with you
    • The public key is used to encrypt data and the private key is used to decrypt it

    Usage:

    1. You sign up for a service with all the normal info minus a password and click submit
    2. In the background, a private key is generated and stored in iCloud Keychain, Google Passwords, or a 3rd party password manager (so all your devices can access it). A public key is also generated and given to the service
    3. Now you try and login. You enter your username and click login
    4. In the background, the server encrypts a challenge, token, or some piece of data and sends it to your device
    5. Your device decrypts that piece of data with the private key associated with the website
    6. At this point, your device either sends the decrypted data back to the server in exchange for an access token or maybe you decrypted the access token (not sure exactly how that will work. If it’s the former, the data would still be encrypted via ssl so only you and the server would see it)
    7. Now you are logged in

    Closing:

    So, it’s supposed to be more secure because every time you login, you never type in a password that gets transferred to the server for verification. The server is sending your device data to verify so that it can then verify you. This mainly prevents phishing and the reuse of passwords but I suppose if someone hacks into your iCloud account or whatever, they have the keys to the kingdom 🤷‍♂️


  • To add to your comment, I don’t understand the hate for YouTube. People go on their and post entire how to videos on all sorts of topics. I’ve learned how to code, how to use Linux, how to install flooring, how to 3D model using Fusion360, how some electronics work, how to fix my broken down car, etc. Because of the creators, YouTube has been such a valuable source of information that it’s almost offensive when I hear other people complaining about having to watch ads or pay for premium. There’s no paywall for the info, it’s accessible to anyone with an internet connection. There’s a lot of low quality clickbait on YouTube but if you avoid it, YouTube is amazing. It’s the only streaming service worth paying for.

    Edit: YouTube will probably slowly try and squeeze revenue out of its creators and/or users, I’m not ignorant to the fact that the number needs to go up and to the right. Eventually, it’ll be too much. But in the meantime, enjoy it while it’s still there and accessible.