Hacker Newsnew | past | comments | ask | show | jobs | submit | CDSlice's commentslogin

If your password is long enough it doesn’t matter if they know it is say 16 characters and if it isn’t long enough it also doesn’t matter because they can just brute force all the potential lengths up to it. So yes it is just security theater.


Giving away the password length helps attackers to select the easier target.


That's an argument for telling people the strength of their password, and warning them when setting a weak password. It's not an argument for decreasing usability in a fashion that will make people less comfortable typing long, complex passwords.


It is also the only SSO flow I have ever seen that fundamentally cannot work if you have more than one account remembered on your device. So far the only way I’ve found to get it to let you log out of account A and then log into account B is to clear all cookies otherwise it gives you permission denied errors. Have no idea how it can be this horrible


Yeah I have had this experience too. Woe betide ye if your company gets bought by another company with pre-existing Azure AD.


Would container tabs solve that? They're pitched as helping separate work and personal logins.


I just run completely separate browser profiles to separate work and personal stuff. And I still sometimes need private mode or a throwaway profile to get some random thing to work.


I use temporary-containers on firefox and they are a marvel for working with microsoft's stuff, which absolutely doesn't anticipate two accounts working on one browser.

Of course "open in incognito mode" works for this as well, just less automatic.


I am not sure how, but at one point even private browser mode would still have me logged in to Entra ID. Couldn’t log out of main browser and same session would follow me to private.


Firefox's? Yep. Edge's? Bloody hell no.


Not to mention that they can make back $65M in just a few weeks from one of their two mobile games and they are about to launch a new one. This is basically pennies to them.


One of their three. HI3 and HSR aren't the same game.


Don't forget their best game tears of themis


It actually isn't a fork of Scratch3 but was started way back in Scratch1.4 as a JS implementation using Morphic which was inspired by Squeak. It is really good software and IMO is better than Scratch since it provides the tools to scale up from the toy programs Scratch is optimized for.


If they are confidential they probably shouldn’t be uploaded to any website no matter if it calls out to OpenAI or does all the processing on their own servers.


Not to excuse Google but I think their main problem is that Qualcomm stops providing support for their chips pretty quickly which makes it much harder to run newer versions of Android that have newer kernels. Apple controls not just the OS but the chips as well so they don’t have to work around that problem.


Hardly an excuse, legal contracts exist and if Google would really care, they would enforce updates as condition to future AOSP access.


This isn’t even close to accurate. For one thing, developers already pay to license the Unity engine, it’s only free if you agree to keep the unity logo loading screen and make under a certain amount of money.

Two, unlike the Reddit API changes which just annoyed mods at worst (yes there were problems for people with disabilities but that is such a small percentage it was basically a rounding error for them) this is an existential threat to F2P mobile games which are Unity’s largest market by far. When you aren’t directly selling the game and the only way to make money is to get as many downloads as possible in the hope that a certain small percentage buy IAPs these few cent fees per install could very easily wipe out their entire revenue.

Three, unlike Reddit which had no viable alternatives for the millions of end users to migrate to, Unity has far fewer customers and an extremely viable replacement in the form of Unreal and potentially Godot.


Very sad to hear that they had to shut down but I am also not particularly surprised. The Shadow Tactics games were well made but also extremely niche. The lack of micro transactions made for a better game but also meant that there wasn’t much recurring income and they had to work while under the stress of knowing that if they make one bad game the entire studio would go bankrupt.

Best of luck to everyone at the studio, hopefully the bonus they are giving out is sizable enough that the workers won’t have to stress out about finding a new job too quickly, especially since this seems to be a pretty sudden announcement.


> The most powerful image deepfake AI ever created. See any girl clothless with the click of a button.

This is just disgusting. I thought it would just be a uncensored generative AI but certainly wasn't expecting peeping-tom as a service. And advertise it so blatantly as being able to virtually strip any girl you have pictures of just makes me sick.


I agree it’s gross, but I’m not sure how to articulate it. It’s making real something people have done in their minds-that is imagine people with no clothes on. These pictures aren’t the actual subject naked. There’s nothing being discovered or disclosed. It’s a pure fiction. But it still bothers me.


It is fiction yes, but if it is lifelike enough does the difference matter? Even without the ick factor of making porn of someone without their consent, it would be so easy to destroy someone's career or relationship by making these deepfakes and then spreading them around. Especially once the tech gets more life-like and loses the current AI gen tells.

And the same would apply to doing this the old fashioned way in Photoshop, however you have to admit that taking it from "need special software and experience in using that software" to "just upload their image to a website and get back their AI generated nudes" is a huge change in how accessible this is.


> it would be so easy to destroy someone's career or relationship by making these deepfakes and then spreading them around.

If nude pics can get you fired, work culture needs to change.

Same with relationships.

Basically, people need to learn not to trust digital media at all without some kind of authentication, and to be a little more tolerant of nude human bodies when they do pop up.


Potentially the opposite. It may become more difficult to use such images to harm someone's career or relationship. Perhaps nothing is believable in the future.


I’d like to believe that this is the future. Already with the rise of digitally native relationships nudes have become commonplace (even Jeff Bezos has sent some). Now with these widely accessible deep-fake generators any leaked nude photo can be chalked up to digital malfeasance!


>it would be so easy to destroy someone's career or relationship by making these deepfakes and then spreading them around.

Only because this tech isn't yet well known. People will just correctly learn to not trust anything they see online.


The average IQ doesn't allow for that.


When it's on TV and people are aware it will sink in.

It's only Voice cloning that really scares me.


I’d also add that the knowledge of what’s possible diffuses to abusers a lot quicker than it diffuses to, say, the grandparents of victims.


Through all that pain, humanity adapts.


[flagged]


If by virtue signal you mean call out creeps and perverts then yes. The world would be a much better place if people did that more often instead of just leaving them be to hurt women and teenage girls. Maybe then they would at least not act on it in public.


It's okay to have morals and to talk about them.


When you make less than $15 an hour like a lot of Americans that can be quite a bit of money. Especially since a lot of older cars that they would be more likely to drive are probably less fuel efficient and have larger tanks.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: