3 ms·

> To add the secret to the watchface code, you need to convert it to hexadecimal bytes. This cryptii.com page will allow you to do that conversion. Note you’ll

> To add the secret to the watchface code, you need to convert it to hexadecimal bytes. This cryptii.com page will allow you to do that conversion. Note you’ll have to enter your TOTP secret in uppercase. I wouldn't be comfortable entering my TOTP secret into a random web page. In Linux (Ubuntu here, probably other distributions as well) you might have the `base32` and `od` tools already installed (package 'coreutils'). Otherwise the project is awesome (just the watch is fugly :))

matheusmoreira 2y ago
The board is also compatible with the A158W and A171W, they look much better.
- Loughla 2y ago
  [flagged]
  - fortran77 2y ago
    @dang, please remove this ageist comment.
  - matheusmoreira 2y ago
    Now I'm wondering what a fashionable young man's watch is supposed to look like. I think the synthwave aesthetic is really cool but maybe it's just me.
    - filoleg 2y ago
      F91W from the article is unironically cool now (and has been since forever afaik). Especially in streertwear circles. I’ve legitimately seen plenty of people from early 20s to mid 30s wear F91WF, with Balenciaga tier of the outfit to match. From the streets to night clubs to literally anywhere, both men and women. Definitely not the “socks and sandals and polo shirts crowd.” Hell, there are photos of Obama wearing it well during his early days[0]. 0. https://www.reddit.com/r/casio/s/sUKUFoyq2s https://www.reddit.com/r/casio/s/sUKUFoyq2s
johnisgood 2y ago
Yeah, why would anyone rely on a third-party, and a website one at that for something as simple as base-32 decoding... or generating TOTP. :P
- dps 2y ago
  Author of the post here… Cool to see this back on HN! I was trying to provide instructions that anyone could use regardless of platform, hence the choice of web tools (both those linked process the data locally). If you know of a base32 decoder that’s easily available on Windows, Mac and Linux I’d be delighted to update the post.
  - johnisgood 2y ago
    OpenSSL, base32, basez, C program, Python or Lua script? I have a Lua script that generates TOTP (with base32 decoding), for example. What are your requirements, would either of these suffice?
  - fragmede 2y ago
    WSl means Unix command line tools are available on windows as well these days.
alright2565 2y ago
This is why I keep uMatrix around still https://i.imgur.com/9MYqLvj.png https://i.imgur.com/9MYqLvj.png I can quickly disable XHR to confirm websites don't do anything server-side when I don't expect them to.
- BHSPitMonkey 2y ago
  You'd really need to block fetch(), websockets, WebRTC, all external images/stylesheets/scripts added to the DOM later, and service workers (to prevent the upload from just being deferred). It's not easy to make sure a web page can't phone home.
  - KTibow 2y ago
    Throttling inside of Devtools should do all of those.
  - tyingq 2y ago
    Well, and writing cookies which would upload at a later visit. And probably a dozen other paths.
pimlottc 2y ago
If you must use a web app, you can at least use CyberChef, which runs entirely in the client and is widely used in security testing. https://gchq.github.io/CyberChef/ https://gchq.github.io/CyberChef/
- gchq-7703 2y ago
  Example recipe to do it for you: https://gchq.github.io/CyberChef/#recipe=To_Upper_case('All')To_Base32('A-Z2-7%3D') It looks like 'cryptii' also appears to do all processing client-side.

matheusmoreira 2y ago

The board is also compatible with the A158W and A171W, they look much better.

Loughla 2y ago
[flagged]
- fortran77 2y ago
  @dang, please remove this ageist comment.
- matheusmoreira 2y ago
  Now I'm wondering what a fashionable young man's watch is supposed to look like. I think the synthwave aesthetic is really cool but maybe it's just me.
  - filoleg 2y ago
    F91W from the article is unironically cool now (and has been since forever afaik). Especially in streertwear circles. I’ve legitimately seen plenty of people from early 20s to mid 30s wear F91WF, with Balenciaga tier of the outfit to match. From the streets to night clubs to literally anywhere, both men and women. Definitely not the “socks and sandals and polo shirts crowd.” Hell, there are photos of Obama wearing it well during his early days[0]. 0. https://www.reddit.com/r/casio/s/sUKUFoyq2s https://www.reddit.com/r/casio/s/sUKUFoyq2s

johnisgood 2y ago

Yeah, why would anyone rely on a third-party, and a website one at that for something as simple as base-32 decoding... or generating TOTP. :P

dps 2y ago
Author of the post here… Cool to see this back on HN! I was trying to provide instructions that anyone could use regardless of platform, hence the choice of web tools (both those linked process the data locally). If you know of a base32 decoder that’s easily available on Windows, Mac and Linux I’d be delighted to update the post.
- johnisgood 2y ago
  OpenSSL, base32, basez, C program, Python or Lua script? I have a Lua script that generates TOTP (with base32 decoding), for example. What are your requirements, would either of these suffice?
- fragmede 2y ago
  WSl means Unix command line tools are available on windows as well these days.

alright2565 2y ago

This is why I keep uMatrix around still https://i.imgur.com/9MYqLvj.png https://i.imgur.com/9MYqLvj.png I can quickly disable XHR to confirm websites don't do anything server-side when I don't expect them to.

BHSPitMonkey 2y ago
You'd really need to block fetch(), websockets, WebRTC, all external images/stylesheets/scripts added to the DOM later, and service workers (to prevent the upload from just being deferred). It's not easy to make sure a web page can't phone home.
- KTibow 2y ago
  Throttling inside of Devtools should do all of those.
- tyingq 2y ago
  Well, and writing cookies which would upload at a later visit. And probably a dozen other paths.

pimlottc 2y ago

If you must use a web app, you can at least use CyberChef, which runs entirely in the client and is widely used in security testing. https://gchq.github.io/CyberChef/ https://gchq.github.io/CyberChef/

gchq-7703 2y ago
Example recipe to do it for you: https://gchq.github.io/CyberChef/#recipe=To_Upper_case('All')To_Base32('A-Z2-7%3D') It looks like 'cryptii' also appears to do all processing client-side.