Rafert

8 ms·

31.
by Rafert 4y ago
Why not, it seems to be coming to 1Password: https://www.youtube.com/watch?v=lYFxfchhR1g
32.
by Rafert 4y ago
They've already put this WebAuthn teaser up: https://www.youtube.com/watch?v=lYFxfchhR1g
33.
by Rafert 4y ago
I think you missed "since then" preceding the second quote.
34.
by Rafert 4y ago
Don't forget they're getting sued by a large customer of theirs too, claiming their solution doesn't deliver what was promised: https://www.pymnts.com/legal/2022/authentic-brands-sues-bolt...
35.
by Rafert 4y ago
Isn't that the gap the likes of Next.js are filling?
36.
by Rafert 4y ago
The actual exchange with the server is using public key cryptography. How you unlock the key material locally could be a number of ways: PIN, password, fingerprint scan, voice recognition, etc
37.
by Rafert 4y ago
YJIT benchmarks can be found at https://speed.yjit.org/ The Rust port doesn't change performance much according to the pull request description.
38.
by Rafert 5y ago
https://charity.wtf/2017/05/11/the-engineer-manager-pendulum... is a great read on this.
39.
by Rafert 5y ago
The PCI Security Standards Council has been working on the Secure PIN on COTS (SPoC) standard for a few years: https://blog.pcisecuritystandards.org/new-pci-software-pin-e...
40.
Uber Radar: Intelligent Early Fraud Detection System with Humans in the Loop(eng.uber.com)
3 points by Rafert 5y ago|0 comments
41.
by Rafert 5y ago
The UUID type index in Postgres is optimized: https://brandur.org/sortsupport
42.
by Rafert 5y ago
You might want to look into what the FIDO Alliance is doing with WebAuthn. The problem is already being solved.
43.
by Rafert 5y ago
Shopify has had the Buy Button for years. Combine with the Lite plan for $9 a month ( https://www.shopify.ca/lite ) and room to grow if the business takes off without replatforming.
44.
by Rafert 5y ago
100%. 3DS is for card payments and using Netherlands and Germany as examples here is just plain bad - in these countries bank-based payment methods are more popular: iDEAL in NL (which has used 2FA for years), Sofort and Giropay in DE. See:
45.
by Rafert 5y ago
My brand new Kitchenaid dishwasher has the prewash compartment on top of the normal compartment - effectively making it a measuring cup throwing its contents into the tub once you close the door.
46.
by Rafert 5y ago
> Proprietary cassettes for dishwashing machines? That's next level. I was in the market for a new washing machine and noticed the Miele W1 machines now have something similar called "TwinDos". You can still add detergent
47.
by Rafert 5y ago
I think you're confusing the cloud-assisted Bluetooth (caBLE) transport with actual built-in device keystores. Google is testing this on their properties while it's being standardized in CTAP and WebAuthn, see https://g
48.
by Rafert 5y ago
TPMs are also sold separately that which can be plugged in to motherboards, e.g. Gigabyte ( https://www.gigabyte.com/us/Motherboard/GC-TPM20-SPI-20 ) and Asus ( https://www.asus.com/Motherboards-Compo
49.
by Rafert 6y ago
> Store money including the smallest possible subdivisions. This is fine as long as everybody follows ISO4217. In my experience many 3rd party systems _mostly_ do it and of course you get bitten by the edge cases. For example, Stripe dec
50.
by Rafert 6y ago
According to https://www.ecb.europa.eu/press/pr/date/2012/html/pr120725_1... it was part of the SEPA migration but as a customer I remember quite a lot of card skimming happening too at the time, an
51.
by Rafert 6y ago
That is Yubico's flavor of U2F attestation. U2F has been succeeded by WebAuthn, you'll probably want to look at https://www.w3.org/TR/webauthn-2/#sctn-defined-attestation-f... instead.
52.
by Rafert 6y ago
> As a port, CCS2 is backwards compatible to CCS1. You can take a CCS1 (J1772) cable and plug it into a car with a CCS2 port. And yes, the J1772 (CCS1) is by far the standard connector in the US market. I see that connector everywhere. C
53.
by Rafert 6y ago
Counterpoint: I use the Circuit Electrique network (owned by Hydro Quebec) and their infrastructure has been great. Level 2 curbside chargers are found throughout the city and they app works fine. There's a few super chargers outside M
54.
by Rafert 6y ago
Have I got good news for you: https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-... - ICYMI WebAuthn is the successor to U2F.
55.
by Rafert 6y ago
How do people even figure out they need to be on page 10? Sounds like a filter of some kind (e.g. before a date) would be better, except they trained themselves to use x amount of pages to approximate. Either way, 10 pages isn't so bad
56.
by Rafert 6y ago
> CarPlay is a subscription I've been looking at BMWs this year and IIRC they backed out of this after the backlash: https://www.autocar.co.uk/car-news/technology/bmw-u-turns-ap... - agree with your other
57.
by Rafert 6y ago
The Ruby-based tooling has been released as open source: https://github.com/Shopify/deprecation_toolkit
58.
by Rafert 6y ago
That's correct, but 1Password stores a static secret (the password) and this may be re-used by less security-minded folks as you probably know. WebAuthn servers only store a public key which is useless in case the server gets compromis
59.
by Rafert 6y ago
WebAuthn is well supported across all major browsers and can be used for multifactor login without username and password.
60.
by Rafert 6y ago
WebAuthn does this pretty much.

More ›