arnarbi

8 ms·

31.
by arnarbi 3y ago
> None of these changes are necessarily authenticated - I don't know that it specifically was the user agent that shared the token with the service or added the read-only restriction, at least with the core tech. Macaroons are very
32.
by arnarbi 3y ago
Not really, no, if you refer to them being used for chaining. In FIDO it’s just used as a plain MAC in the expected places.
33.
by arnarbi 3y ago
Very much looking forward to the blog post! At G we’ve relied on some existing key replication APIs and the caveats have just been the simplest possible and rigid protobufs for each application. (And thanks! I’m still citing your Velvet Und
34.
by arnarbi 3y ago
(author of the paper in your second link, which the Biscuit spec also references) Macaroons are an abstract thing. They don't define an encoding format, nor any semantics or language for the caveats. So a lot of detail is left up to th
35.
by arnarbi 3y ago
Light painting photography has been around for quite a long time, I wouldn’t call it an imitation of digital art, nor non-traditional. https://lightpaintingphotography.com/light-painting-history/
36.
by arnarbi 3y ago
> how can you use public and private keys without encryption Signing is different from encrypting. https://en.wikipedia.org/wiki/Digital_Signature_Algorithm And yes, 100% agree we can do better in terms of explainin
37.
by arnarbi 3y ago
There isn’t encryption nor a generated password involved with passkeys. Rather, your device generates a private key and stores it in your password manager - and only the public key is sent to the server. When you log in later, the server us
38.
by arnarbi 3y ago
> Will both be able to log me in to a Google Account? Or do I need an Android phone for that? Yes and no, respectively.
39.
by arnarbi 3y ago
You can still use your password today on a Google account with passkeys. And account recovery via other means (depending on a lot of things) is still available. It's too early to completely replace all methods with passkeys, but the ho
40.
by arnarbi 3y ago
There’s more info on this here: https://research.nccgroup.com/wp-content/uploads/2022/04/NCC... In short we can only verify PINs, and only a very limited number of guesses, enforced by hardware.
41.
by arnarbi 3y ago
> How can my smartphone know whether I'm interacting with the correct website on my laptop? Because when evil.example requests the passkey it has to do so through browser APIs [1], and it can't lie about its domain name. Your b
42.
by arnarbi 3y ago
You can create a passkey for your account on their device, e.g. by selecting "Use another device" when creating it, and scanning the QR with their phone (their phone does not need to be signed in to your account). And if you both
43.
by arnarbi 3y ago
At the 350 rpm of the input gear it’d be early by only 1.3x10^80 times the age of the universe.
44.
by arnarbi 4y ago
Subject 4 in the first line also looks very different from the ground truth, but clearly an airliner. I'm curious if there is also a closer match to that one in the set.
45.
by arnarbi 4y ago
“pod” is rotationally symmetric and in the dictionary.
46.
by arnarbi 4y ago
OP’s link has a list at the bottom with alternatives (that in itself is very cool). It lists both gdu and a Rust alternative called dua.
47.
by arnarbi 4y ago
> New developments like Apple's PassKeys Note that passkeys come out of the collaboration of many industry partners within FIDO and WebAuthn. I.e. it's not "Apple PassKeys" -- just "passkeys". See for exampl
48.
by arnarbi 4y ago
There will be, in the password manager settings on Android (under Settings, "Passwords & Accounts" and "Google"), but it will unfortunately take a couple of more days to roll that out to the beta.
49.
by arnarbi 4y ago
Ah! Apologies, I did not read that properly.
50.
by arnarbi 4y ago
Try thinking of it this way: The information is in which door the host does not open. 2/3rds of the time, your initial choice will be a goat. In those cases the host deliberately avoids opening the remaining door with a car - thereb
51.
by arnarbi 4y ago
(Apologies if I’m misunderstanding and you already know this.) Not specifying a register (e.g. "0) just means the commands, including x and p, will use the " register, aka the unnamed register. By itself, p is equivalent to "
52.
by arnarbi 4y ago
xp is a quick way in vi to swap two adjacent characters (a common typo correction) Ctrl-T does the same in emacs, and also in readline based programs like bash, as well as everywhere on macOS.
53.
by arnarbi 4y ago
This also works in any native text input on macOS.
54.
by arnarbi 5y ago
Er, “employer” should read “employee” in the last paragraph.
55.
by arnarbi 5y ago
In the short term yes. But that is exactly what the industry and employers rely on. Long term, tipping just means these employers can compete for labor against other (non-tip) industries forced to pay higher, and without having to reflect t
56.
by arnarbi 5y ago
Because it doesn’t actually work that way and it’s in no way an “option”. In reality tipping becomes expected and people withhold it when the service does /not/ meet expectation. That’s awkward and too confrontational for a lot of
57.
by arnarbi 5y ago
The text at the top specifies it's the natural minor (Aeolian)
58.
by arnarbi 5y ago
The part of the demo where he creates a computed field inside the sub-result (in a hierarchy), and then uses that in an aggregate at the next level above is excellent. And then he can still see the constituent rows contributing to the aggre
59.
by arnarbi 5y ago
I think you are right (but we could both be wrong). The way I experience countersteer is that it pulls the bottom of the bike towards the outside of the curve, in order to lean or maintain a lean. If you lean with balance it’s not needed.
60.
by arnarbi 5y ago
Here's an old thesis (of mine) in CS, with a bunch of inference rules, proofs, etc. (Ignore the standardized front matter of ~5 pages) https://skemman.is/bitstream/1946/7418/1/MSc_Arnar-Birgisson...

More ›