Notices by Kevin Karhan :verified: (kkarhan@mstdn.social), page 3

@thatguyoverthere @BrodieOnLinux

Just use a pencil or pen to tick out those you used. #ProblemSolved

Sarcasm aside, they also allow and encourage me to store my recovery codes seperately, thus they can also allow me to do the same with #TANs to #2FA, and with #iTAN they mitigate or at least vastly reduce the success rate of shouldersurfers gaining valid TANs...

@thatguyoverthere @BrodieOnLinux Let's just say that if #Github wants to mandate #2FA they need to make it even more accessible than #git is.

If I can't fit it on an #OS1337 boot floppy and keep it fully airgapped on paper without knowing time and date, it's shit.

If banks accept #iTAN to do million-euro transactions than Github can so too...
https://mstdn.social/@kkarhan/110965679190470398

@thatguyoverthere @BrodieOnLinux

Also yes, all #iTAN implementations will cross out all used TANs and the last 2-5 are used to auth a new iTAN sheet...

And the best part of it: those can be perfectly seperated and don't need anything but paper and ink to put them on.

Personally, I do want my shit to be so secure that I can't backdoor it at gunpoint without the ability to commit asset denial towards the attacker...

Call me weird, but I'd be dead for over a decade if I wasn't that cautious...

@thatguyoverthere @BrodieOnLinux

Yeah, it's really a downgrade and sadly not practical for me at all...
https://mstdn.social/@kkarhan/110975953455694385

@thatguyoverthere @BrodieOnLinux because I want #2FA to be actually secure...

And I've yet to see something beat "cold storage in a gun safe rathed to withdatand fires and explosions"...
https://mstdn.social/@kkarhan/110975929326068697

@BrodieOnLinux @thatguyoverthere yes but putting #2FA on the same machine is kinda killing the security advantage.

The idea of Two-Factor - Authentification is to prevent someone from creating chaos if they gain access to an account or it's credentials...

@thatguyoverthere @BrodieOnLinux it does require one to have a device to run it on tho.

Also nothing prevents them from generating iTAN lists and just request a randomized unused entry from it.

It's not as if they'll require it for every push and every merge of code.

@BrodieOnLinux it means that if #GitHub doesn't support any good #offline - capable #2FA like #iTAN, a lot of folks won't use it at all!

Espechally since they don't support EVERY NATION AND NETWORK nor can one expect to have a dedicaded and secure phone number for that!

@stux I wish @Gargron would stop #shitposting and take his software more serious...

@romin no.

Because insanity isn't fun or cute...

@feld @SlicerDicer @thatguyoverthere

Nuclear was a mistake from day 1.

No NPP would've been built if the operators were to pay the cost of care for the longterm storage and decontamination.

Not even gonna tell you to go into a Uranium Mine and drink some ground water from it's vicinity, cuz that would wishing harm upon someone else and I think that'll make me a bad person...

@feld @SlicerDicer @thatguyoverthere

My point is none of them are good - period!

None of them are sustainable and all of them are very finite.

We've more important applications for those resources than turning water into steam to make a turbine go spinny and a generator go brrrr...

@feld @SlicerDicer @thatguyoverthere

Even the worst renewable is preferential to nuclear - period!

@thatguyoverthere @feld @SlicerDicer the numbers in that regard are obviously cherrypicked.

Not to mention that every wind farm has more "envoirmental impact" scrutiny than any thermal powerplant...

But hey, fossil fuels and nuclear are also totally safe... #lolnope...

@SlicerDicer @feld @thatguyoverthere

Then again, the wind farms ain't the problem because at a global scale, that's less of a concern than any combustion engine...
https://bikeshed.party/objects/73b4eb64-fadc-47ba-8bae-6b8c3a0a50b6

@coolboymew https://www.youtube.com/watch?v=9FLRHejWAo8

@coolboymew xD
https://www.youtube.com/watch?v=5I-Np6VFlAo

@accretionist @amolith @torproject I think #Tor should choose #Monero :monero and @tails should drop that #Bitcoin :bitcoin: wallet app for #FeatherWallet instead.

https://mstdn.social/@kkarhan/110911512100104344

@aral who uses spaces in filenames?

@aetus Consider trying out @libreoffice / #LibreOffice, #Okular, #PDFarranger & @mozilla #Firefox then?

You can even donate to #FLOSS and I'd suggest you donate the equivalent of their #CCSS counterparts' #subscription.

#WorksForMe for > 10 years now and I'm considering to get an actual #Support #Subscription for @ubuntu since that's a convenient option and I do rely on #Ubuntu LTS for work.