@cairnechen #3
NIST 就是这么写的
https://pages.nist.gov/800-63-FAQ/#q-b05


Q-B05:
Is password expiration no longer recommended?
A-B05:
SP 800-63B Section 5.1.1.2 paragraph 9 states:

“Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.”

Users tend to choose weaker memorized secrets when they know that they will have to change them in the near future. When those changes do occur, they often select a secret that is similar to their old memorized secret by applying a set of common transformations such as increasing a number in the password. This practice provides a false sense of security if any of the previous secrets has been compromised since attackers can apply these same common transformations. But if there is evidence that the memorized secret has been compromised, such as by a breach of the verifier’s hashed password database or observed fraudulent activity, subscribers should be required to change their memorized secrets. However, this event-based change should occur rarely, so that they are less motivated to choose a weak secret with the knowledge that it will only be used for a limited period of time.

每天都来一遍 winget upgrade --all

我记得 NIST 已经说了定时改密码对提升安全没有作用，不清楚为什么那么多学校和企业就是喜欢这个……

*两年

M1 ，用酒精/异丙醇擦了一年，没事

@meisen #2 那是因为*NIX 版本的 TG 客户端都有内存泄漏，用 Windows 就好了。

公司政策允许就搞个 5G CPE 吧，流量卡那种 30 块钱 100G 的如果不够那就上华为天际通

iPhone SE 干啥都热

其实 IP 限制是为了防止滥用，现在整体模型质量下降了也没必要了

这个是 FCM ，小米系统 FCM 需要开启相应应用程序的自启动
但是安卓上这个通知是 Play 服务接收的，不需要手动授予自启动权限

V2 似乎没做好防止连续发帖功能

欺诈性广告不用管

安卓好像都会

这么快就买到了吗

几乎所有的社交软件都不同程度上歧视 Android 用户

我这都写了 160T 了
已用寿命 5%

就算硬件支持外接显卡，也没有驱动，macOS 也没有实现

理论上通行密钥会通过 iCloud 钥匙串 /Google 密码管理器保存，你添加之后如果在 iOS 和安卓的密码管理器里能看到就是了
这种通行密钥就可以换任意设备登陆了，也可以浏览器扫码登录

另外一种是只保存在手机 TPM 上，这种不会被同步所以客服说的这种情况会出现，这个严格意义上不算 passkeys

要具体看网站用的是哪种