William O'Connell

I make games and stuff. Developer of https://subtextgame.com

Website: https://williamoconnell.me

Last Notes

2025-08-22 13:09:41 UTC

- reply

Never seen that, but I've never had a Sony phone so it could be something with their version of the UI? My experience has been that the Google and Samsung software is pretty good and some of the other ones are a little screwy (though not without their own merits).

2025-07-02 19:05:12 UTC

- reply

This is your first post I've ever seen on this platform, I have no idea what solutions you may have proposed aside from "passwords with no backup" which I don't think is workable for the vast majority of users. The main issue I took with your post was the implication that Google's authentication strategy comes from developers who "don't have a clue about the real world", which I don't think is true at all.

2025-07-02 18:56:07 UTC

- reply

It seems like you're expecting a perfect solution that works for 100% of people with no downsides, and you don't want it to cost any money to implement. I don't think I'm the one being unrealistic.

2025-07-02 18:44:08 UTC

- reply

When I say biometrics what I mean is something like Amazon One where the hardware is public (in a library or a convenience store or something). So in this imagined scenario you wouldn't have to own anything, you'd scan your palm at the library computer and your email would automatically open. Obviously there are privacy concerns there, but it's the only thing I can think of that doesn't require you to remember anything or posses anything.

2025-07-02 18:31:09 UTC

- reply

In the meantime if you know specific people who have this problem, I think Proton will give you free password-based email without needing a phone.

2025-07-02 18:29:22 UTC

- reply

Companies don't care about anything, they're machines that generate profit for their owners. Homeless Gmail users probably aren't that profitable. If there are services that homeless people need from Google, either the law needs to force Google to serve those users, or some other not-for-profit entity needs to be created to serve them. But I think an effective solution would have to be based on biometrics, which people have a lot of reservations about.

2025-07-02 18:27:20 UTC

- reply

How would that help? A new passkey created for example.net won't let an attacker access your account at example.com. I don't know how else to communicate this; passkeys are highly effective at preventing phishing. This has played out repeatedly in the real world. It's not theoretical.

2025-07-02 18:06:36 UTC

- reply

I don't think users should be forced to use passkeys as their only authentication method, to be clear. And I agree that Google, etc. could do more to help homeless/phone-less people use their services. But I think basically every organization could do more to help people in that situation? IMO it's more about incentives than "tech bros".
Web authentication for someone that has no possessions and can't remember their password (no one can) is a tough problem.

2025-07-02 17:34:52 UTC

- reply

That's why passkeys are useful, they are immune to all of that. If your bank is example.com, example.net cannot compromise your account. Even if you're 100% convinced that example.net is your real bank, your passkey for example.com will not work there. This has been tested in the real world, it has stopped some very sophisticated phishing attempts.
https://blog.cloudflare.com/2022-07-sms-phishing-attacks/

2025-07-01 22:45:38 UTC

- reply

I think the current design/implementation of passkeys pretty bad, but I also recognize that phishing is the #1 cyber threat facing most people so I'm generally supportive of movement away from passwords and towards phishing-resistant authentication. Am I a big tech bro?

2025-06-26 22:38:54 UTC

- reply

This almost certainly isn't it but I'll mention just in case: I had a computer that randomly started being very slow and it turned out the CPU fan had died so it was thermal throttling. Took me awhile to figure out because I don't think task manager has CPU temperatures (or didn't at that time anyway).

2025-05-07 20:58:36 UTC

- reply

"The only cloud storage that doesn't track your activities and protects your privacy."
This seems like a really silly claim. Did they audit every other cloud storage provider in existence?

2024-12-25 18:56:09 UTC

- reply

I don't know much about it, but the Unihertz Jelly Max is advertised as being very small if you haven't already seen it.

2024-12-09 20:03:49 UTC

- reply

What does "CDNs excluded" mean? If you embed from code.jquery.com does that count for what you're asking?