If you mark your keychain as shared or not affects the way it is stored and the keys used to lock it down. It's actually documented quite a bit in their Keychain Security documentation.

There is a potential threat using Keychain Recovery. Less so from Apple or a court order given to them. Keychain is stored in such a way that Apple themselves cannot access it, unless they are lying.

See also: https://support.apple.com/guid...

And passkey support will be added in shortly as well.

Hardware tokens are not the only options. Cell phones have them built in (unlocked with PIN or Biometrics), some operating systems have them built in too. Password managers are adding support.

It supports 2-step authentication, their passkey support is nearly there but not 100% for hardware tokens (it never prompts for the token pin).

Firefox does not yet support the QR-code passkey option for people to use with their phones, so Thunderbird cannot either. Thunderbird oAuth still works fine if you tell it you want to use a password.

Thunderbird has used oAuth for years now, they do need to enable the passkey support that is already built in to the stuff they grab from Firefox.

You click the button to use a password instead and it works like always.

That's why it's biometric OR pin. Pins work fine to unlock these.

Biometrics are not required to use passkeys, she would use a pin or passcode.

You can register multiple passkeys. It's usually a good idea anyway in case you lose one. Password is also still there, you just hit "Log in a different way".

They can be hardware tokens, stored in the secure enclave on a cell phones (locked behind PIN or biometrics), computer using something like Windows Hello, or password managers like 1Password or soon to be Bitwarden.

Amazon makes it VERY easy to do this with kindle books, and makes it difficult to report to get it fixed.

A while ago I did a search for Ray Bradbury and the results included some college student's essay about a Ray Bradbury book - allegedly written by Ray Bradbury (he was the "author"). The title made it somewhat obvious it was not the actual book, but if you weren't looking closely you could be duped, and the numerous negative comments showed that many had been. I searched for the essay author and there were other entries loaded in the same way.

I contacted Amazon and it took two days to get them to even realize what I was saying, they kept treating me as a self-published author who needed help fixing the entry. Once I escalated twice I eventually found someone who could do something, and it did eventually get removed.

You can have custom payloads!

If it can remain in a relatively stationary position in sustained 40mph winds, it is by definition going 40mph. To stay stationary it would have to match the speed of the wind, and if it can do that then in calm winds it would still be able to go that same speed (and groundspeed at that). It is the same reason a fixed wing aircraft can hover or perform STOL maneuvers.

If it were moving with a tailwind, it could travel significantly faster over the ground than their specifications even mentioned.

Off by default in WIndows 8, otherwise configurable in the Recycle Bin properties.

On is a reasonable default for the masses, and configurable for those who actually know what they want to do. Don't forget some people use the Recycle Bin for storing things they want to keep.

Most likely due to Samsung Knox.

I don't think this was a flaw in that safe files list. It mentions it could be executed automatically, not that it was executed without warning.

Safari has the "Open 'safe' files automatically' option which is turned on by default. I think this is more likely the issue.

Kind of.

The issue was not Java applets embedded in webpages, they were still disabled. It has to do with a (stupid) feature in Safari, "Open 'Safe' files after downloading." Apparently the Java web start files were on the safe list and would auto-execute.