He is right in the sense that windows device drivers tend to be more power efficient & as a result a fresh Windows install lasts a longer time, however if we compared Linux with TLP vs. a 6 month old Windows install, I think the results would be interesting.

In most cases the "offending" tiger would be killed, why take a majestic tiger with you?

Using that sovereignity for establishing a digital police state is pretty shit even without imperialistic dreams.

and I live in koreader on my kindles, so I can freely set everything stock kindle software doesn't want you to, such as margins + no need to use Kalibre to apply settings to epubs.

lots of people freak out actually (not me)

it’s absolutely possible to reduce the number of tries to hits to a manageable level for a distributed botnet that can’t easily be blocked.

This is very hard for me to imagine. Even if the people running the website are incredibly incompetent, they would have to be intentionally moronic about passkey generation for what you are envisioning to be realistic. You are right that passkeys enable brute forcing on a scale regular passwords don't, but it doesn't matter, because normal passkeys are just too long for this to be a worry.

But on the other, online piracy is gonna be a bit more difficult for a while.

doubt

For me what makes a big difference is that on my ereader I can use ragged right with consistent spacing between the words, reading like that is much easier on the eyes than a printed book where they are trying to over-optimize for space, aka all text is justified & every book has a different font.

I assume Apple will go well out of their way to plug whatever hole allowed this boot to happen on new generations.

That's probably not really a concern, since I'm guessing the main thing that enables this is jailbreak, which is an ongoing cat & m game since the iphone 3g's era.

And if the site is hacked, they can get a lot of information about how the passkeys

I don't like passkeys, but this is not a real worry, unless the service you are using is ran by idiots. I mean to say that knowing how passkeys are generated is typically not helpful in guessing your passkey. There are more interesting questions where security fumbles, like is your data encrypted on the provider side & is that encryption tied to your passkey or not, often not, since they want to mine your data.

Just use a botnet and start throwing probable keys at it and you’re likely to get a few.

This is not plausible, would take billions+ years to stumble upon just one with a botnet that has all online PCs on Earth utilized.

Remote attestation is the real problem with where passkeys are going.

That's why it fucking sucks that Youtube is a monopoly.