BC TECH
Saved by @zmbnski

Just published 15,000+ words on security keys. 🔐📱💻

With SIM attacks at their highest, now is a great time to take a closer look at your online security.

Removing SMS from your two-factor auth is a start, but authenticator apps have downsides too...

https://t.co/Dk0MPJHL2V

 Just look at these headlines from recent SIM swap and port attacks.

It's all too established for attackers to find ways to socially engineer control of your phone number and start gaining control of your accounts.

I first talk about some general security tips.
Unfortunately not all websites let you remove your phone number from accounts.

You may consider migrating your phone carrier to @googlefi , which requires email account access to do anything (and can be locked down with security keys and even Advanced Protection)
Beyond SMS, I talk about issues that TOTP authenticator apps (the code generators) have as a form of two-factor auth. They're so, so much better than relying on SMS for your second factor but they still have issues like utilizing shared secrets and lacking phishing prevention.
Enter security keys!

Utilizing public key cryptography they don't have any shared secret between the client and the server. They prevent phishing by taking the website domain into account.

Even if you get tricked by a clone phishing website, your key won't.
Keys have been around for a while under various names and technologies. Recently it was FIDO U2F + CTAP1 but now we have FIDO2 WebAuthn with CTAP2..

It's all very confusing...
Security keys are great for two-factor auth but FIDO2 has a vision for more: support for platform authenticators (like fingerprint readers and other biometrics) as well as being able to use them for "passwordless" authentication. https://t.co/qHI8n8x8m6
But this area is still nascent. Plagued by years of sub-par security key support across browsers. Things have been getting better in recent years with recently updated NFC support on iOS 13 but it's still a waiting game until things are made easier.
Which brings the question.. Why must I carry around an extra device just to be safe online?

You shouldn't. WebAuthn aims to change that.

But for now, security keys—combined with strong online security best practices—are a great way to fortify your regular online activities.
This article was so long (like all of mine) that I took the time to build this little fly-out table of contents browser 🤣
I also went out of my way to design these little security key icons in figma while I was writing this 😍 cc @Yubico

More from Tech

Ferruccio Balestreri \U0001f308
Ferruccio Balestreri 🌈...
@0xferruccio
🕵️‍♂️ How Google's PageRank algorithm works

The PageRank algorithm gives each page a rating of its
importance, which is a recursively defined measure of importance, based on if important pages link to it.
It's recursive because the importance of a page refers back to the importance of other pages that link to it

Here's how it works in practice:
1⃣ We start with some pages and crawl them for links


2⃣ Each page has 1/N points (where N as the total number of pages)


3⃣ Add points to each page for the amount of links to it, divided by the number
of links emanating from the sources of these links
TECH
Alex Stamos
Alex Stamos
@alexstamos
The entire discussion around Facebook’s disclosures of what happened in 2016 is very frustrating. No exec stopped any investigations, but there were a lot of heated discussions about what to publish and when.


In the spring and summer of 2016, as reported by the Times, activity we traced to GRU was reported to the FBI. This was the standard model of interaction companies used for nation-state attacks against likely US targeted.

In the Spring of 2017, after a deep dive into the Fake News phenomena, the security team wanted to publish an update that covered what we had learned. At this point, we didn’t have any advertising content or the big IRA cluster, but we did know about the GRU model.

This report when through dozens of edits as different equities were represented. I did not have any meetings with Sheryl on the paper, but I can’t speak to whether she was in the loop with my higher-ups.

In the end, the difficult question of attribution was settled by us pointing to the DNI report instead of saying Russia or GRU directly. In my pre-briefs with members of Congress, I made it clear that we believed this action was GRU.
TECH
Advertisement
Matt Wallace
Matt Wallace
@MattFnWallace
Hey, who wants to read a story about @Upwork fucking over freelancers in order to upsell their clients on unnecessary services the clients don't want and can't afford? Strap in!

So after my marketing agency closed I started freelancing again. A marketing company that wanted to work with me only hires freelance writers through @Upwork. So I signed up. I wasn't thrilled about it, but that's who they contract with and it's their marketing company.

I've been receiving regular assignments from this company, thru @Upwork, for over a month now. I've written dozens of articles for them. My work has been exemplary. I've been handling repeated rush jobs and delivering. The client was and is very happy. That's coming from them.

While I was wrapping up several assignments this week I was contacted by the marketing company. They asked if I had taken a new full-time job and wasn't available anymore. It seems @Upwork's talent group told them I was no longer available to take assignments.

I was very surprised. Nothing had changed on my end. I still needed the freelance work very much. I told them so. So the marketing company pressed @Upwork and were told there were "compliance" issues that were preventing the marketing company from giving me any more work.
TECH
Tobie Langel
Tobie Langel
@tobie
Elastic didn't really relicense ElasticSearch. It forked it.

🧵 A thread.

1/18

There's a lot of talk in the open source community about the cost of forking.

2/18

- "Forking is best avoided."

- "Forking is a last resort option."

- "Forking is like a nuclear weapons. It's a defensive threat."

3/18

Forking is seen as impractical and extremely expensive.

And that's a Really Good Thing(tm).

It's a forcing function for figuring out solutions that are broadly acceptable across the community.

4/18

The thing is, the cost of forking is mostly a function of three things:

1⃣ the size of the community that you can bring along with you,
2⃣ whether you need to rename your fork (who owns the trademark), and
3⃣ how much infrastructure you need to rebuild.

5/18
TECH
Mukund Mohan
Mukund Mohan
@mukund
EV Battery overview
Batteries are the key differentiator between the various EV manufacturers. The amount of energy stored in the battery determines the range of the EV, thought to be a major limitation on EV sales.


Consumers tend to worry that an EV with a range of 80 to 250 miles on a single charge would be inconvenient for long trips due to the time it takes to recharge the battery. Commercial batteries need to ensure there is quick recharge and less time between charges


The lithium-ion battery is important because it makes EVs expensive than ICEs. Battery costs per kilowatt-hour (kWh) declined from roughly $1,000 per kWh in 2010 to $227 in 2016


Lithium-ion batteries made up 70 percent of the rechargeable battery market in 2016
BNEF projects that global production capacity for lithium-ion batteries will increase from 103 gigawatt-hours (GWh) in the first quarter of 2017 to 273 GWh by 2021.


The battery manufacturing supply chain has three main parts:

cell manufacturing,

module manufacturing, and

pack assembly.
TECH

You May Also Like

Andrey \uf8ff Azimov
Andrey  Azimov
@AndreyAzimov
The best way to know if people like your product is NOT:

- Have a lot of emails in the waiting list
- Become #1 on PH
- Become #1 of HN or Reddit
- Have people that saing "I'll pay"
- Have a lot of free users

The best way to know if they're actually pay for it.

The only thing that matters is your product providing a value, and you can't know this until people will pay money for it.

We can have a first signal of a product/market fit after the launch by check how many sales we've got in the first 24h. Some scale:

200+ This has a high potential.
100+: This has a potential.
50+: Some people need it.
10+: People almost don't need it.
0+: People don't need it.

This is for a single time payment product. For a subscription probably it should be less because people hate subscription.

And obviously, you should have a lot of traffic like 3-5k+.

Here is a stat for my products (macOS apps) for the first 24h after the launch:
STARTUPS
SK
SK
@sk_diary1
A #story from #Thiruvilayadal puranam- one of divine leelas of Bhagwan Shiva

#threadseries #madurai

Koodal Kaandam

Story 21 - it is about how stone elephant came to life and ate sugarcane - When Raja Abhisheka Pandyan met Ellam Valla Siddhar

கல்யானைக்கு கரும்பருத்திய படலம்


Raja Abhisheka Pandiyan went ahead to meet Ellam Valla Siddhar on the premises of the temple.On seeing the arrival of Raja, people surrounding Siddhar moved back. Abhisheka Pandiyan introduced himself to Siddhar &asked about his whereabouts.Also his purpose of visit to Madurai.

Raja asked why he performed magical acts, does he expect anything from him or people of Madurai.

Siddhar laughed & replied to Raja that he was from Kasi. He had heard a lot about Madurai in Kashi.Also told that this place is a Mukti Kshetram,so he had come to stay here.

Siddhar asked Raja if he has the capability &power to give anything that he asks for. Siddhar told King that he has power to do things even if he think of it.Siddhar asked King to ask whatever he wants & it would be provided, whatever these people had asked, they were granted.


Abhisheka Pandyan was shocked to receive such a reply from Siddhar,& he decided to test the power of this Siddhar. By that time, Raja saw a person in crowd having Sugarcane.

Raja took Sugarcane from that person.
ALL
Advertisement
Jijo Sunny
Jijo Sunny
@JijoSunny
1/ 👋 Excited to share what we’ve been building at https://t.co/GOQJ7LjQ2t + we are going to tweetstorm our progress every week!

Week 1 highlights: getting shortlisted for YC W2019🤞, acquiring a premium domain💰, meeting Substack's @hamishmckenzie and Stripe CEO @patrickc 🤩

2/ So what is Brew?

brew / bru : / to make (beer, coffee etc.) / verb: begin to develop 🌱

A place for you to enjoy premium content while supporting your favorite creators. Sort of like a ‘Consumer-facing Patreon’ cc @jackconte

(we’re still working on the pitch)

3/ So, why be so transparent? Two words: launch strategy.

jk 😅 a) I loooove doing something consistently for a long period of time b) limited downside and infinite upside (feedback, accountability, reach).
cc @altimor, @pmarca


4/ https://t.co/GOQJ7LjQ2t domain 🍻

It started with a cold email. Guess what? He was using BuyMeACoffee on his blog, and was excited to hear about what we're building next. Within 2w, we signed the deal at @Escrowcom's SF office. You’re a pleasure to work with @MichaelCyger!

5/ @ycombinator's invite for the in-person interview arrived that evening. Quite a day!

Thanks @patio11 for the thoughtful feedback on our YC application, and @gabhubert for your directions on positioning the product — set the tone for our pitch!
TECH
Billy Bostickson \U0001f3f4\U0001f441&\U0001f441 \U0001f193
Billy Bostickson 🏴👁&👁 ...
@BillyBostickson
Tip from the Monkey
Pangolins, September 2019 and PLA are the key to this mystery
Stay Tuned!


1. Yang


2. A jacobin capuchin dangling a flagellin pangolin on a javelin while playing a mandolin and strangling a mannequin on a paladin's palanquin, said Saladin
More to come tomorrow!


3. Yigang Tong
https://t.co/CYtqYorhzH
Archived: https://t.co/ncz5ruwE2W


4. YT Interview
Some bats & pangolins carry viruses related with SARS-CoV-2, found in SE Asia and in Yunnan, & the pangolins carrying SARS-CoV-2 related viruses were smuggled from SE Asia, so there is a possibility that SARS-CoV-2 were coming from
ALL
Maurice Casey
Maurice Casey
@MauriceJCasey
I am reading through reams of late-1920s communist poetry and easily my favourite title so far is: "To a Lady who Rejected a Poem about Spring as a Petit-Bourgeois Deviation"

The last lines:
"So here's my hat into the air,
Three cheers for your amazing hair,
For coal mines, and for turbines, too,
For steel, the Comintern and you!"

A not exactly graceful (though possibly satirical) title: "Lines Disassociating Myself from Yessenin and Supporting the Otherwise Unfounded Legend that I am a Foremost Proletarian Writer"

An excerpt:
"Goodbye verses of Yessenin
Goodbye literary slop-
You are not the line of Lenin
You are not the line of WAPP

Never shall I moan a
simple lyric from the heart
I'll devote my new corona
to the proletarian art"

The poet was Joseph Freeman, who published much of his revolutionary verse in the New Masses, a stylish journal of the interwar American literary Left.
CULTURE