What possibly was the logic here?

You have also made a good argument for socialized energy production. Any time you run into these situations where the optimal solution for a good society requires and is anti-profit, that’s a good place for socialized ownership.

At first, I was going to pass on destroying music, but then I remembered the anger I feel any time I have to see Peter Pan because, in part, the fucking racist shit that is What Makes the Red Man Red. Maybe I could work out a deal to erase the entire movie…

Before anyone attempts to defend it with, “it was a product of the times”, know that the play Peter Pan is based on was considered shockingly racist at the time and Disney’s solution to that was to double down on the racism so that nobody would take it seriously.

This is because Mary Poppins lied to us. It isn’t a spoonful of sugar that makes the medicine go down, but something with a bit of salt in addition to that sugar. Salt masks bitterness.

I’m showing my age, but back when IE was basically the only browser and Firefox (Firebird back then) launched, people often lamented that things didn’t work in Firefox. The solution? People used Firefox and web developers were forced to make their shit work in Firefox. When Chrome came out, suddenly we had three real options and the way to make everything work? Open Standards.

Now, Chrome is in the position IE was back before Firefox came around. How ever will we make sure things work in Firefox??? Use Firefox. If enough people dump Google’s malware browser, the web has to go back to supporting multiple browsers through open standards.

Interestingly, they were designed for warmer environments where Kinder eggs would melt. The fact that they circumvented the weird US restrictions was a side effect.

The attack vector is as follows:

1. Evil.com phishes a user and asks for username and password for Good.com
2. Evil.com immediately relays those credentials to Good.com
3. Good.com asks Evil.com for TOTP
4. Evil.com asks victim for TOTP
5. Evil.com relays TOTP to Good.com and does a complete account takeover

The various physical dongles prevent this by using the asking domain as part of the hash. If you activated the dongle on Evil.com, it’ll do nothing on Good.com (except hopefully alerting the SOC at Good.com about a compromised username and password pair).