Lightnews — Scholar-powered news

LightNews

Ricky Mondello

@rmondello.com

7.3K followers 240 following 740 posts

💚 Friend 🏳️‍⚧ Trans, nonbinary, they/them 😷 Caring, careful 🔑 Pass{keys, codes, words} 🧛🏻‍♀️ It’s not a phase 🦔 Speedrunner

Posts Media Videos Starter Packs

Pinned

Ricky Mondello @rmondello.com · Dec 7

felt cute

A selfie of Ricky. They have a tidy bob haircut and bangs, and are looking directly at the camera. They're wearing a brown t-shirt that has the face of a cute, but somewhat angry, bear, drawn in a pencil sketch style, solid white on the backdrop of brown. They are definitely very cute in this photo.

Ricky Mondello @rmondello.com · 11h

I can’t speak for 1Password, but I strongly suspect that they’re working to ship support for iOS 26’s support for exporting passkeys, passwords, and verification codes between credential manager apps.

Ricky Mondello @rmondello.com · 11h

Available on iOS *today* between Apple Passwords, Dashlane, and Bitwarden. There’s more to go here, but it’s happening!

Sangeeth Sudheer @runofthemillgeek.com · 11h

A main peeve that prevents me from making a jump is not being able to export/migrate to another pass manager. I hope that lands soon.

Ricky Mondello @rmondello.com · 11h

you were just saving a little treat for yourself is all

Ricky Mondello @rmondello.com · 11h

“But I‘ll never get phished! I’m too smart!”

I hope you’re right! And I hope every person who you care about is as smart as you are!

Ricky Mondello @rmondello.com · 11h

> If phishing, password reuse, or weak passwords are in the threat model, passkeys provide value.

Nearly everyone is at risk from passwords, because you don’t even have to make a mistake to be harmed by them. In addition to these threats, websites can leak passwords!

Ricky Mondello @rmondello.com · 11h

Basically, the key difference is that the PIN you use locally to use the passkey is never sent to a website. So the knowledge factor is vulnerable *locally*, when someone has access to your device. But most attacks happen via remote attackers.

Let me know if this isn’t clear and I’ll try again!

Ricky Mondello @rmondello.com · 11h

Many people are susceptible to a website tricking them into revealing their password on the wrong website. Lots of people reuse passwords. Sometimes passwords leak from websites.

These are all “online” problems — you’re susceptible to a remote attack. Passkeys have none of these problems.

Ricky Mondello @rmondello.com · 11h

What’s this second factor on top of? A password?

Ricky Mondello @rmondello.com · 11h

It’s possible and common for scam websites to trick people into giving away their password and 2FA code. Passkeys aren’t vulnerable to this kind of attack (the same way that security keys aren’t). If phishing, password reuse, or weak passwords are in the threat model, passkeys provide value.

Essence of Anime @geraldawo.bsky.social · 16h

So I've been investigating and I cannot find any reasonable reason to use passkeys, they don't replace username/passwords and, as far as I can see, aren't more secure than just a username/password with MFA.

Does someone have another opinion? Everything I see suggests they are nothing special.

Reposted by Ricky Mondello

Maggie Tokuda-Hall @maggietokudahall.bsky.social · 16h

Today my daughter's preschool is holding a farewell assembly for one of her classmates whose mother has no choice but to self deport. The school is hoping it will be joyful in tone, so we might make this less upsetting for this 3 year old.

There's just no words for the uselessness of this cruelty.

Reposted by Ricky Mondello

Natasha Tara Petrović @ Portland Retro Game Expo 732 @1000deaddraculas.bsky.social · 16h

YOU WOULD DOWNLOAD A CAR

White and green illustration of a Y2K era computer with pop up windows of a car. It is proudly proclaiming "YOU WOULD DOWNLOAD A CAR".

Reposted by Ricky Mondello

Juno Rylee Schultz @junoryleejournalism.com · 2d

David Simon, creator of ‘The Wire’, being interviewed by Ari Shapiro (NPR)

SHAPIRO: OK, so you've spent your career creating television without Al, and I could imagine today you thinking, boy, I wish I had had that tool to solve those thorny problems...
SIMON: What?
SHAPIRO: ...Or saying...
SIMON: You imagine that?
SHAPIRO: ...Boy, if that had existed, it would have screwed me over.
SIMON: I don't think Al can remotely challenge what writers do at a fundamentally creative level.
SHAPIRO: But if you're trying to transition from scene five to scene six, and you're stuck with that transition, you could imagine plugging that portion of the script into an Al and say, give me 10 ideas for how to transition this.
SIMON: I'd rather put a gun in my mouth.

Reposted by Ricky Mondello

Jill Blake @biscuitkitten.bsky.social · 2d

“the girlfriend of one of the founders of antifa”

Ingrid Bergman as Ilsa Lund in Casablanca

Reposted by Ricky Mondello

Senator Bernie Sanders @sanders.senate.gov · 2d

Adelita Grijalva won her election fair and square.

Now House Speaker Mike Johnson is refusing to swear her in because she would be the final signature to release the Epstein files.

Mr. Speaker, respect democracy. Obey the law. Swear Representative Grijalva in immediately.

Reposted by Ricky Mondello

Andi Zeisler @andizeisler.bsky.social · 2d

"the girlfriend of one of the founders of antifa”

Winona Ryder, covered in ash and dragging on a cigarette at the end of “Heathers”

Ricky Mondello @rmondello.com · 2d

Very weird, very wrong, very cheap shot at Apple here.

Reposted by Ricky Mondello

Quinta Jurecic @qjurecic.bsky.social · 2d

he's going to come after you either way, so you might as well act with integrity

Reposted by Ricky Mondello

Anne Applebaum @anneapplebaum.bsky.social · 2d

"We took the freedom of speech away," says the president

Aaron Rupar @atrupar.com · 2d

Trump: "We took the freedom of speech away because that's been through the courts and the courts said you have freedom of speech, but what has happened is when they burn a flag it agitates and irritates crowds."

Ricky Mondello @rmondello.com · 2d

Now I'm just waiting for Rosalina to get the message.

Tim Cappalli @timcappalli.me · 2d

Luma 🤝 #passkeys

Reposted by Ricky Mondello

conputer dipshit @davidcrespo.bsky.social · 9d

just realized the dril drunk driving tweet also works for regular driving

wint @dril
drunk driving may kill a lot of people, but it also helps a lot of people get to work on time, so, it;s impossible to say if its bad or not,

Reposted by Ricky Mondello

Ryan Mac 🙃 @rmac.bsky.social · 4d

Ah yes let us not judge her based on the words that come out of her own mouth but rather whether or not she created shareholder value

Ricky Mondello @rmondello.com · 4d

reading this was like watching insult and injury learn how to multiply themselves

Ricky Mondello @rmondello.com · 4d

me and my agonies could spend an entire weekend on that thing

Reposted by Ricky Mondello

Lex McMenamin (they/them) @leximcmenamin.com · 4d

Greta Thunberg, deported to Greece, says the targeting of the Sumud Flotilla is "not the story" @teenvogue.com — instead, she says:

"Israel once again violated international humanitarian law by preventing aid from getting into Gaza while people are being starved.”

Greta Thunberg On Her Detention: I'm "Not The Story" — It's Israel Violating International Humanitarian Law

“I could talk for a very, very long time about our mistreatment and abuses in our imprisonment. Trust me. But that is not the story.”

www.teenvogue.com

Reposted by Ricky Mondello

Sprouts 🌱🔜 BLFC DD @coolartcorner.bsky.social · 5d

currently the mood rn