CIRCLE WITH A DOT

@g I’ve used MagSafe since it was reintroduced fewer than 10 times

It made more sense when you needed to keep the MacBook connected to power most of the time. But on Apple silicon I charge it mostly when I’m not using it. Like an iPad or a phone

RE: https://mastodon.social/@kepano/116217022837356456

Obsidian Web Clipper is the most under appreciated miracle technology I’ve used in a long time. It’s sooo useful even if you don’t use Obsidian!

And how it works seems like magic

Yahoo has pulled some shady shit with how you sign in to email from Apple devices

So my mom tells me she can't get email from any of her devices. Turns out Yahoo had signed her out everywhere: Mac, iPhone, iPad. I had to help tet her signed back in on everything

It turns out they've broken the sign-in process in the following ways. Note this is *entirely* in the native account sign-in flow in Settings:

- They've somehow broken password managers in the webview so 1Password won't fill username/password. You have to switch back & forth copying/pasting
- They've broken #passkey support here as well, I'm guessing due to whatever they did to break password managers. So you get downgraded to a less secure 2FA mechanism like SMS
- And here’s the kicker: they're injecting a super aggressive interstitial in the sign-in WebView that tries to trick you into downloading the Yahoo Mail app instead of signing in to Mail.app

There's literally no way my mom could have navigated this. She 100% would have ended up installing an app she doesn't need because Yahoo told her to and because Apple Mail was "broken." I obviously don't *know* what's behind the forced sign-outs and the breaking of password managers and passkeys, but given the aggressive upselling of the Yahoo app, it really seems intentional

cc @rmondello because passkeys

@jerry infosec.aura represents a fresh start and an ideal opportunity to put these difficult lessons into practice

@jerry What are infosec.exchange’s community rules around bad auras? If someone with a bad aura signed up knowing bad auras are not allowed per instance rules against bad auras, your hands are tied ¯\_(ツ)_/¯

@bagder “Substitute ‘damn’ every time you’re inclined to write ‘very’; your editor will delete it and the writing will be just as it should be.”