Post #2843607

2026-02-22 16:42 UTC

@navi@social.vlhl.dev @lumi@snug.moe you obviously didn't get the point. this is mandated by national restraints on what "securely" technically means. It is not about that you want to clone it, it is about national law requiring the company to make sure, you are not able to make a copy of thing that is meant to be singleton, because the whole verification process is based around this assumption. Otherwise you would be required to authenticate way more than you are willing to do

Replies (2)

@navi@social.vlhl.dev 2026-02-22 16:45

@asltf@berlin.social @lumi@snug.moe if something should not be copiable, it should not be in the user's device private keys are copiable, user data is copiable, if a user copied their auth tokens to another system, that system is their system, any system that breaks because two machines copied the same id, is a broken system and needs to be fixed there's no national "security" law that mandates this kind of thing, they want to do it because it is labeled as "standard security" by google

Open ##2843608
@greatlaketrout@noc.social 2026-02-22 18:23

@asltf@berlin.social @navi@social.vlhl.dev @lumi@snug.moe nation states should not have that power and they certainly should not be limiting the choices of their constituents or violating their own “supposed” privacy policies. There is simply no excuse for this level of duplicity

Open ##2843621