←back to thread

Apple already shipped attestation on the web, and we barely noticed

(httptoolkit.com)
596 points pimterry | 1 comments | 25 Jul 23 14:10 UTC | HN request time: 0.221s | source
Show context
lbriner ◴[25 Jul 23 14:51 UTC] No.36863124[source]▶
The problem with most of these systems is they can never cope with any edge cases. This means it works fine for 99% of the population but the other 1% can get stuffed.

It would be like having a robot deny you access to the office after work hours even though you only need to grab your car keys that you forgot. The system is designed to be secure so you can't talk your way past a robot. If it was a human, it would be much easier to reason with them (normally!) and find a solution that works.

Techies gonna tech though. "If there was a problem yo I'll solve it, check out my tech while the DJ revolves it."

replies(2): >>36863213 #>>36865255 #
1. kccqzy ◴[25 Jul 23 16:46 UTC] No.36865255[source]▶
> If it was a human, it would be much easier to reason with them (normally!) and find a solution that works.

The Internet has shown that if you drive down the cost of interacting with this human gatekeeper to zero (you can be anywhere in the world rather than a specific place and time), social engineering attacks inevitably result. That's how we get hackers getting into your bank accounts just because they are eloquent and they make a great case reasoning with the human gatekeeper.