Comment Re:I'd love to trash Edge, but... (Score 1) 103
Ah interesting, never seen that before! I've just turned it on to see how annoying it is.
Ah interesting, never seen that before! I've just turned it on to see how annoying it is.
Chrome does require authentication for every password retrieval. It uses Windows Hello as well so in theory you don't even have a password to intercept since something like facial recognition authentication via a FIDO2 handshake is what ultimately allows Chrome to fill a single password on a single site.
Maybe I'm misunderstanding what you mean by 'auth' here, but on my PCs (Windows 10):
It does require auth for passkeys, I think every time, but not for regular saved passwords in the browser. I have Windows Hello set up for a couple passkeys and I have to auth via Hello when I use them.
But I have regular saved passwords for almost every other website I use routinely and am not prompted to auth via Hello for that. My understanding is that for these, the auth/unlock is done once at user login and then the session has access to the unencrypted passwords.
(I posted elsewhere in this thread about Chrome using DPAPI as of 2024 - this was news to me so it's possible I'm just way out of date).
Been trying to figure out how Chrome does this because my recollection was that Chrome had the exact same problem - I remember making a similar point to you in forum threads a couple years back with people complaining about it then.
It looks like in 2024, Chrome added support for something called the Data Protection API (DPAPI), which provides some mitigation against arbitrary memory reads:
App-Bound Encryption relies on a privileged service to verify the identity of the requesting application. During encryption, the App-Bound Encryption service encodes the app's identity into the encrypted data, and then verifies this is valid when decryption is attempted. If another app on the system tries to decrypt the same data, it will fail.
Because the App-Bound service is running with system privileges, attackers need to do more than just coax a user into running a malicious app. Now, the malware has to gain system privileges, or inject code into Chrome, something that legitimate software shouldn't be doing. This makes their actions more suspicious to antivirus software â" and more likely to be detected
It's not clear from my quick read if this defends against this class of "attack" in all cases but it reads like it might provide at least some protection?
If that is the case, it of course raises the question why Microsoft - who created DPAPI in the first place - wouldn't use that same service in the same way. (i.e. maybe it just sucks and they know it's a waste of time
Clink also worth a look: https://chrisant996.github.io/...
Except in this environment they'll just raise a few extra billion dollars and buy all the water anyway and price out anyone that is not a VC funded AI company
Google Assistant has supported this for like a decade via "hey Google, note to self"
FWIW I live in Queensland and we have several zones which use average speed over distance. There are still plenty of stationary point-in-time cameras but a bunch of average zones. Most recently I think was in some of the tunnels in Brisbane.
Middle of the day here in Queensland, Australia - renewables are providing 63.2% of our total energy
This is a shock to clueless CEOs who have never spoken to anyone forced to buy Chromebooks outside of enterprise agreements where nothing matters to either side except the number of zeroes on the invoice.
Our small business has had about 30 people on Chromebooks for about five years now. These have, generally, been great - most of them cost less than AUD$700, though they've gotten more expensive.
We've been buying Intel i5 CPUs with 8GB of RAM. These run most stuff with no problems.
But in true PC style, what the manufacturers have done is make a billion different models with different specs such that there is actually a dramatic difference in performance between them. You can buy something with an AMD CPU with 4GB of RAM and it's a piece of shit - but you won't know until you get it home and try it, because you just bought "a Chromebook".
We started buying i7/16GB models from Dell - these ones fly and are great. But then they simply stopped selling them. For two years they couldn't tell me what their Chromebook strategy was, because they only care about schools.
I think Apple will clean up here by making it simple - there are a small handful of models that are easily differentiable. They're Apple branded so they will be immediately more coveted than a random Chromebook thing.
I'll be buying some of these to replace our aging Chromebooks for sure. Keen to see how they go.
It's a shame because the i7/16GB Chromebooks are awesome to use.
Delightful explanation and now forever in my brain fusion will be "squeezing the wriggling eel with magnets"
Yeh, typo. But it was a bad election result that got him appointed.
We have some measles cases in the community at the moment. They've been cagey about where they originated but they have confirmed it came from an "overseas visitor".
Since RFK Jr was elected, I have been slowly putting together something to pitch to my federal MP to put pressure on them to do something about visitors from the US - exactly as we would from any other third-world nation were diseases were running rampant - like requiring evidence of vaccination status.
No idea what it would look like or what makes sense but just know we have to do something to keep ourselves safe now that we all apparently live in this stupid regressive universe at the moment where we're going to be getting dragged backwards by the insane, ignorant people running the US government.
I live in QLD. Writing this and the spot price for power is
-$33.73 / MWh, largely because of solar deployments in the state.
The sun is, as usual, beating done - we're the "Sunshine State" here, and in fact we're having the driest spring in almost 40 years at the moment. Solar is having a great time.
Battery prices are tumbling, so now it's possible to make decent money being paid to charge your battery for several hours off the grid during times like this then sell it back in the evening at peak time. People are building businesses around this while our dipshit (conservative) government is doing this posturing for our wealthy coal mining magnates and companies.
Everyone else that can is just going solar, and batteries are next especially with more incentives to deploy them in homes. It's possible to be almost completely independent of the grid for a one off spend of about 2 percent of the value of the median home here now.
Yeh, yeh, not everyone can do this. I rent and just asked my landlord if she'd put solar on and she has refused (she doesn't yet know there's a government programme about to drop that incentivised landlords to deploy solar, which may change her mind, but I want to be out of here before then anyway).
Coal is still a core part of our grid but it's clearly on life support.
When you can buy and sell cryotoassets and meme stocks and never lose money?!
Seriously, how much of gambling is being eaten up because of the hype around stonks from the last few years, and the US administration pumping crypto scams?
This is how most "AI" tools that deal with PDF seem to work. Format is too janky but OCR is a mature field, one which has been enhanced by modern ML techniques. Says a lot for how awkward a format PDF is for exchanging data.
The best things in life go on sale sooner or later.