jadero

joined 1 year ago
[–] jadero@lemmy.ca 84 points 8 months ago (7 children)

Ingesting gasoline is deadly in far smaller doses due to something called hydrocarbon pneumonia. My dad very nearly died as a result of having a tiny amount get past his throat while siphoning gas to a small engine's tank.

If you must siphon gas, go buy a cheap "pump siphon" from Canadian Tire.

[–] jadero@lemmy.ca 16 points 8 months ago (1 children)

Until now, I've never seen anything with epoxy that I found visually impressive. And you went all the way to stunning!

[–] jadero@lemmy.ca 2 points 8 months ago* (last edited 8 months ago)

What the hell? Journalism really has disappeared. Why isn't there a single story from a major outlet that includes both results, explaining the differences and implications?

Thanks for the update.

[–] jadero@lemmy.ca 26 points 8 months ago (1 children)

Well, since there is no syphilis vaccine, nobody is vaccinated.

[–] jadero@lemmy.ca 2 points 9 months ago

Also, for what it's worth, TD is not just the only bank I know of, but the only website I know of that allows for a user-generated username to be used for login. My TD username was generated by the password generator of my password manager :)

So they don't get it all wrong.

[–] jadero@lemmy.ca 14 points 9 months ago (4 children)

The inquiry into the invocation of the emergencies act found that it was justified, although not without problems. Those problems don't seem to have been in any way related to the freezing of accounts.

My opinion is that he's got, as we old-timers like to say, a tough row to hoe. (Or a snowball's chance in hell; take your pick.)

[–] jadero@lemmy.ca 2 points 9 months ago (2 children)

Over the years, I've been with all the big Canadian banks and a couple of different credit union networks. They're all trash, in my opinion. I've sent security notices to all of them and never had a response, nor any evidence that they addressed the problems. TD just happens to be the place we landed after giving up on everyone else.

As for transaction downloads, I couldn't tell you. I gave up on ever having access to my data, so I just record it manually.


Security notice examples:

TD was running their SSL/TLS in a way that made them vulnerable to downgrade attacks.

A credit union finally upgraded their login page to allow a real password instead of just a 6-digit PIN. It took repeated complaints and some customer lobbying to get that, but the new page also blocked access to pasting and autofill, negating the utility of a password manager.

[–] jadero@lemmy.ca 2 points 9 months ago (7 children)

I also use TD. That they still allow only SMS for 2FA should be a crime.

[–] jadero@lemmy.ca 2 points 9 months ago* (last edited 9 months ago) (2 children)

Authentication is only ever as strong as it's weakest link. All the fancy passwords, MFA, passkeys or whatever mean nothing in the face of "I forgot my password" email resets and the like.

I know people who just hammer randomly on the keyboard whenever they get asked for a password, then use the "I forgot my password" system to get "authenticated," providing yet another set of random keystrokes as the new password.

And it's not horrible, I guess. They're using strong passwords. They're never reusing passwords anywhere, not even for successive logins at the same site. They have to be explicitly targeted by someone who is willing to target their email system.

This does nothing to secure against mass breaches, but neither does the strongest authentication system. But, like any of the strongest authentication systems, account takeover requires deliberate targetting.

[–] jadero@lemmy.ca 6 points 9 months ago (1 children)

Credit bureaus are just data brokers in disguise, so they're shady, both in concept and by design.

Porn is part of the sex trade, so shady mostly by perception.

I don't really think it's possible to do anything more than try to safeguard my personal information. But if forced to choose between those two, I'll pick a major porn site over a credit bureau every time.

[–] jadero@lemmy.ca 12 points 9 months ago (1 children)

I wish them all the best, but I think that getting the desired status will just make for one more voice to ignore. We are masters of deafness when it comes to indigenous voices, especially when there might be profits at stake.

view more: ‹ prev next ›