The emails Inky detected instruct the employee to resolve security issues such as a missing two-factor authentication enrollment or to change a password and warn of repercussions that may occur if the recipient fails to follow through. Those who take the bait and click on the QR code are led to a site masquerading as a legitimate one used by the company but it captures passwords and sends them to the attackers.

An attack that would be protected against with a yubikey, webauthn, or passkey.

The iphone 14 pro max costs $464 to make and retails for $2000

I think this in particular is a spurious claim to make. First of all, that was for a phone that retails for $1,099.

Second, a bill of materials is not the cost of a device. There’s research and development, user testing, patents to license, logistics, and of course, software development, unless you think all of those things are done for free.

Apple’s actual profit margin is ~25%.

The direct alternatives to Apple products aren’t better in any philosophical way.

I suppose that depends on whether you consider things like Linux and GrapheneOS direct alternatives.

Seems like they should wait for evidence of an actual problem before regulation. This just smells like luddites to me. 🤷‍♂️

People have gone to jail with little more than metadata convicting them. Metadata is everything.

I don’t think a lot of people appreciate just how bad the “unsolicited dick pick” situation is. Maybe you don’t experience it, but if you’re young and a woman and online, you’ll 100% start getting dick picks from strangers.

Being able to block and report those without first having to view them is a huge win. And this is done in a very privacy-respecting way.