See https://alexbarry.net for projects I’m working on, and contact info.

Also check out github.com/alexbarry

  • 2 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle



  • I don’t think it’s only you. I remember him saying (and even tweeting) that 2015 will be the last FPTP election if the liberals were elected. I was a younger at the time but I remember a lot of people reluctantly voted for him instead of the NDP just to finally end FPTP and be able to choose the NDP as their first choice in the next election (but still choose the liberals as their second choice, to keep the conservatives out). Further reading for anyone interested: https://en.wikipedia.org/wiki/Vote_splitting

    Then they won, claimed that they couldn’t find an alternative that everyone liked, and apparently that was it.

    My understanding is that many people would have been happy with “anything” besides FPTP, but weren’t able to agree on their first choice? …surely it’s not that ironic? Or maybe there’s more to it than that?

    Anyway overall the liberals may have still been the best choice… but this wasn’t some minor promise that he made. I think this is what was most important to a lot of people. Err… I think? No one seems to talk about it now.





  • TL;DR: I may be mistaken about how playable it is, I’ll have to give it another try. Thanks for the reassurance. I haven’t tried it myself in many years, and have only relied on articles like this to hear about the progress. Perhaps I’m biased since the comments always love to hate on Star Citizen and few people are defending it. RE single investor: if everyone who paid money for it was happy then yeah there would be no difference. But I think a lot of people paid money expecting a longer gaming experience within a few years, and instead it’s taken a long time and they’re still focusing a lot on cosmetic things rather than gameplay and content. IMO gameplay and content should be the top priority, and cool visual stuff can come later. But if piracy/mining/exploring planets/missions can actually provide ~10 hours of enjoyment without being seriously hindered by bugs, then I’m totally wrong and should update my comment.

    Thanks for the info, perhaps I should update my comment. It was barely beyond a tech demo when I tried it so many years ago, but it does seem like it’s added a lot since then (and I’ve only learned about it after digging in more today). I’ve seen some comments in this post that said there isn’t much to do besides walk around and look at stuff, which matches my experience many years ago, but perhaps it’s not really accurate anymore. Some articles have talked about piracy and mining actually being viable as ways to make money to get a better ship. If those are enjoyable and not severely limited in content and so buggy that progress is hard, then I’m totally wrong and can maybe say that 10 years later my return on investment is adequate :) , and maybe in another few years there will be even more content and give me something more like ~10+ hours of enjoyment.

    I know people who play several hours a week and say they’re having a great time. There’s definitely a full game in the alpha, but it’s far from polished or finished.

    This is actually really reassuring to me, I’ll have to give it another try.

    Every person I know who’s spent money on star citizen seems happy with their RoI.

    Perhaps the people you’re talking to about it now are somewhat skewed towards people who still enjoy it for what it is now. I’ve almost forgotten and wouldn’t think to mention it to most people, but I paid $40 for it around 9 years ago, because a friend mentioned it to me and it seemed like such an amazing idea. It showed so much promise, the racing seemed fun and complex, and later I tried Squadron 42 and felt like I could see the vision coming together. But then after not trying it for a few years, I keep hearing more of the same thing: new cool superficial feature, but still lacking in significant enjoyable gameplay. I am actually kind of scared to try it again and be disappointed in the lack of content.

    I realize too that Squadron 42 is apparently a fairly long and mostly finished experience? That alone might be worth $40, though I do think 10 years is a little long to wait for that. I’ll concede that they do seem to be delivering on some of the hype, it just takes way too long, and I’d rather they prioritize on something simple but playable for long periods, versus cool immersion and fancy animations and concepts.

    Perhaps a lot of the people who enjoy it now enjoy the kind of role playing aspect of getting in a ship with friends and walking around exploring? I would enjoy that somewhat too, every few years, almost like a really advanced VR chat, I guess. But my friends have lost interest in this due to the never ending development cycle. And I would hate to be the one to say “hey guys let’s try this out again, it’s way better now”, and then have everyone be disappointed when someone gets stuck in a wall or the content seems really limited.

    Anyway to summarize: perhaps I’m wrong, maybe the game is worth $40 now and I’ve just been biased from people loving to hate on a game that they haven’t even tried. I’ll have to give it another try.


  • I agree with you for most games, people are picky and don’t understand the challenges. But this game solicited donations 10 years ago, people bought into the vision, and they were wildly successful, I think they raised $600M, which is like the most money any game has ever raised?

    And despite that, 10 years later, it’s still mostly just a tech demo. They are focused on adding cool but superficial animation things, rather than just making a fun playable experience.

    If they were focused on making a fun playable (but possibly buggy and limited) game then it would be different. But instead they seem to be chasing random superficial features like projecting your face from your web cam onto your character. It feels like they are not seriously committed to making even an early access game in a reasonable timeline.

    If this project was funded by some billionaire who wanted to spend 30 years to make the most amazing MMO ever with a ton of never before seen features, then that would be fine. But instead normal people chipped in $40+ to fund this game, and the developers don’t seem to be prioritizing actually making a fun playable game. It’s barely beyond a tech demo even 10 years later. It is reasonable to assume that the management of this project does not care about making a playable game, they can work on whatever fun features they want, they’ve already made a ton of money.



  • thanks, how did you do this? Did you just download it and add a background yourself (and upload via lemmy) or is there some cool markdown/lemmy trick?

    I was going to say that I was on my phone and couldn’t do that, but I guess I probably could have. (edit: also I forgot that Lemmy even supports image uploading, let alone that I could link to it) I mostly just wanted to see if Lemmy supported the embedded image markdown syntax of ![description](URL to image). (It does!) I found online that some markdown variants support adding CSS at the end of the image, but it doesn’t look like lemmy supports them.




  • To clarify on this: even the people who use gibberish as their password and don’t store it and rely on password resets via email are actually somewhat safe if their email is also highly safe. Maybe their password strategy for CRA implies they don’t take their email password security seriously either… but still, my point is just that “at least as secure as your email” can be an incredibly high bar if you do it right


  • Yes but you’re free to use an email provider which also supports security keys, which gmail and proton mail* do. I understand that the CRA needs to accommodate the average person who doesn’t care about security, but I think everyone in this thread appreciates when they also cater to people who care deeply about security and are willing to use strong unique passwords in a password manager and security keys or at least TOTP.

    • it seems like they require keeping TOTP enabled because their mobile apps don’t support security keys. Meh.

  • This may sound like a wild fantasy to some, but the US IRS seems to have some partnership with ID.me which supports security keys. But I’m impressed that the CRA supports TOTP before major banks so maybe this could happen.

    Granted they also have separate logins for state income tax and California is… well let me just say that I’m grateful that the CRA doesn’t force you to reset your password every 4ish months. (California state income tax (FTB?) does).


  • Ah, I hadn’t heard of the SSL issue, thanks for sharing!

    I’ve noticed that Tangerine only allows for a 6 digit pin, but I think they might also allow for a security question and SMS 2FA? I started signing up with them and gave up when they required a Canadian cell number (I hadn’t yet switched due to high costs, but recently they’ve become surprisingly reasonable—ignoring roaming) and I saw the 6 digit pin password requirement.

    I think it was also BMO that a friend told me required a maximum 8 character password until very recently?

    Anyway overall, thanks for reassuring my suspicion: I should just pick one of the banks and not let “perfect” (or even “decent”) be the enemy of “almost adequate but not great”.


  • Thanks, I suspected this (I only see “authenticator app” when I log in on a new device or periodically, but I wasn’t sure.

    Related: for finance related services like Questrade, I’ve stored my TOTP keys on a U2F key, Yubico in my case. Besides the hassle of managing physical keys, is there any drawback to this approach? I’m slightly worried I’ll lose all my keys in a house fire or something, but I assume there’s a recovery option.


  • Unfortunately I think this is the norm with big banks in Canada, and it is similar to a credit union in the US from when I briefly lived there. Security seems to be a second priority to people losing access (presumably only briefly, since they have brick and mortar locations everywhere).

    Wealthsimple and Questrade seem to support TOTP but I’m not sure if you can still bypass it with SMS. I don’t think so but I haven’t dug into it.

    I’ve used CIBC before and they also seem to require keeping SMS 2FA enabled. Also they send me fraud alerts over SMS, “respond Y to authorize this suspicious transaction”, and I’m dreading the day where I have to enable roaming while travelling just to send a text. They send push notifications through the app to login on a new device though, so maybe in 10 years they’ll do it for transaction approval too.

    Also aside about TD: is there really no way to download a CSV file of all your transactions? My partner uses them and I think we were limited to 18 months, and may have even had to download each much separately (luckily I can use use a program like cat to workaround this, but that seems like a pain for most people). CIBC has irritated me in a lot of ways but I think I can download transactions from back to 2012 when I first opened my credit card, maybe earlier.

    Do you or anyone know about other big banks? My partner and I are looking into a joint account and I want to be able to download all transactions to CSV. Ideally we could get TOTP only (no SMS 2FA) but I’m not counting on it.



  • axby@lemmy.catoCanada@lemmy.caCRA now allows 2FA apps
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    4 months ago

    Not OP but I wanted to read more, I searched and found this: https://www.canada.ca/en/revenue-agency/services/e-services/cra-login-services/multi-factor-authentication-access-cra-login-services.html#toc3

    What is a third-party authenticator app?

    A third-party authenticator app can be installed on an app enabled mobile or desktop device to be used for MFA. The app store offers many free third-party authenticator app options to choose from. Users will need to download an app that is compatible with the CRA sign-in services.

    Using the app, the user scans a QR code with a mobile device when prompted. If unable to scan the QR code the user can manually enter the setup key the CRA provides into the app. The app will now be set up and the user will not have to complete this step again.

    The app will then generate a 6 digit Time-Based One-Time Passcode (TOTP). When signing in to the CRA sign-in services users will be required to enter a one-time passcode provided by the app. For security, the app will generate a new TOTP every 30 seconds.

    Some thoughts:

    • why is it 30 seconds instead of 60 seconds? I’m pretty sure every other TOTP I’ve seen is 60 seconds. My jaded take: the blind pursuit of “better security” even though… what does this even imply? Someone has 30 fewer seconds to read the code over your shoulder and log in on their device?
    • TD offers a passcode generator app, but it seems like you can’t disable SMS 2FA, so if you’re worried about SIM jacking then too bad. I think all the big banks are similar
    • nit: the previous login requires you to re enter the code from SMS 2FA or the grid thing every 8 hours I believe. But most other services seem to let you persist a cookie on the device for 30 days or so, presumably because cookie theft isn’t a huge risk, and because entering your password alone is enough to prevent other people with access to your computer from accessing your sensitive CRA account

    Anyway, sorry for the negativity. This is a great step and I shouldn’t focus on negative things. I just hate how accounts I don’t care much about like Facebook (and formerly Runescape) accounts seem to be more secure from malicious logins than my bank and possibly CRA accounts.