Technology

1. Actually text me the one-time passcode, rather than saying you sent it to me while instead texting it to the molten core of the earth.

Uhhh… how about NO??

In fact, as a casual security professional (it’s not a core part of my job, but I know a lot more than most ppl), I openly advocate making SMS and eMail illegal for transmitting one-time passcodes.

Why? Because both are critically insecure, cannot be adequately secured outside of laboratory or highly restrictive environments, and can be trivially hijacked.

The only one-time passcode that should be used are one-time password generators (TOTP) such as Google Authenticator or any other such method.

Yes, this requires a little more effort on the part of the site owner, but it’s worlds better than SMS or eMail, and far more user-friendly than forcing the user to open the company’s app just to receive the code (looking at you, Canadian banks and other businesses like Telus).

And can we interest sir in an EU privacy law–mandated cookie consent pop-up?

That is the malicious compliance implementation that big tech went for in order to nag us into accepting all cookies, not at all what the EU law had in mind. ”Reject All” is supposed to be as easy to choose as ”Accept All”, or you know, you could just read my browser’s ”do not track” setting, that’s what it’s ducking for.

I like how they say the document "isn't perfect". As if to say the Pope is supposed to be perfect like Christ himself.

Along with everything great he said, one I get disturbed by in reading any page is "Stop doing the thing where the banner at the top of the site auto-hides when I scroll a short way down the page, but then reappears when I scroll back up"

Describing the symptoms of enshittification in the article

Amen. Maybe the pope should get into tech. It’s ducking time.

i am so tired of everyone being catholic sll of the sudden. all religion can suck dick.