Security

via Six Colors: Apple is destroying the Mac by trying to make it safer (Macworld/Jason Snell)

Interesting read on what one learns from auditing other company’s code for several years.

via Rust Weekly: Inside Rust Blog: crates.io Postmortem: User Uploaded Malware

via Stephen Shankland: I predict that passkeys will be a big deal. In my tests using them for Google login, then with CVS just prompting me to migrate to them from password authentication, they were indeed pretty simple to use. 1Password is testing the ability to store passkeys and now the ability to unlock your passkey vault with passkeys. My latest story:

via Micah Lee: You ever really want to open a sketchy document to see what’s in it, but you also don’t want to get hacked? Dangerzone is what you need. It takes potentially dangerous PDFs, office documents, or images and convert them to safe PDFs using sandboxes

via Cory Doctorow’s linkblog:

Two decades ago, my life changed forever: hearing #BruceSchneier explain that “#security” doesn’t exist in the abstract. You can only be secure from some threat. A fire alarm won’t protect you from burglaries. A condom won’t protect you from mass shootings. It seems obvious, but how often do we hear about “security” without any mention of who is being made secure, and from which threat?