cmdli

12 ms·

181.
by cmdli 4y ago
Each credential has its own private key which is signed by the device's private key for certification. I am uncertain if the FIDO2 spec says how those private keys need to be generated; right now they are generated randomly but they co
182.
by cmdli 4y ago
Author here. The credentials are encrypted on-disk with a passphrase, so it wouldn't be trivial extract them, but yes it would be somewhat less secure than a hardware device. I would consider it similar in security to a local password
183.
by cmdli 4y ago
Yup, I built this. The file storage is only for the FIDO2/WebAuthN device, which generates large private keys for each credential; the U2F device keys are small enough that they are actually encrypted/stored in the key identifier
184.
by cmdli 4y ago
Personally, I prefer the "approval" process of YubiKey/U2F devices over having to enter a code, but I also dislike having to have a hardware device on me at all times. Also, with WebAuthN and passwordless login, YubiKeys are
185.
Show HN: A virtual Yubikey device for 2FA/WebAuthN(github.com)
166 points by cmdli 4y ago|138 comments
186.
by cmdli 4y ago
True, but Hetzner has no obligation to serve every customer. I would say this customer has gotten more than their money's worth and Hetzner is well within their rights to no longer provide service. Relevant xkcd: https://xkc
187.
by cmdli 4y ago
Here's a detail: iOS stopped apps from tracking you, and it worked so well that Facebook (an ad company) fought it tooth and nail and lost quite a bit of money because of it. Do you have any such details of similar things happening in
188.
by cmdli 4y ago
As a regular user, I am dreading the day when I am forced to sideload an app with no privacy regulations in order to use key services.
189.
by cmdli 4y ago
Will that be regulated, though? It looks to me like the EU is just taking steps to give companies freedom (by allowing sideloading) but no steps to regulate that freedom (by enshrining app privacy into law).
190.
by cmdli 4y ago
What is corresponding to the physical pattern in your brain? What word would you use to describe that thing that is corresponding to the physical event? It becomes difficult to discuss qualia because we assume their existence so often in ev
191.
by cmdli 4y ago
You don't need to know all that much in order to achieve consciousness. Lets say that you have a program that you assume to be conscious. You run it for 1 second, and exactly record all its internal states and outputs. Now, you can fin
192.
by cmdli 4y ago
I believe the argument is that you can create a more-complex mapping over a course of time, say 1 second. For that 1 second, the mapping shows that the iron bar is conscious. Regardless of what happens after that 1 second, shouldn't th
193.
by cmdli 4y ago
What word would you use to describe the subjective experiences of people? What word do you describe something like the taste of an apple, or the appearance of the color red? That is what Qualia refer to. I would say that it is intuitively s
194.
by cmdli 4y ago
Allow me (not the author) to rephrase the argument. Lets say you have a computer that you would say is conscious. It does some computation, has some output, and you conclude that it is conscious in that moment, lets say for 1 second. Theref
195.
Let's build an end-to-end encrypted data store(bulwark.id)
75 points by cmdli 4y ago|19 comments
196.
by cmdli 4y ago
Material adverse effects have to be rather large; for instance, the company is actually worth 50% less than it was represented as. Even if the bot count is significantly higher (say, 20%) that wouldn't have an easily provable massive e
197.
by cmdli 4y ago
Keep in mind that corporations are extremely focused on short term profits. Home builders would love to build every single person a home and make tons of money, even if it wasn’t a long term business. Add in the potential for convincing peo
198.
by cmdli 4y ago
It only makes you want to act in the short term. In the long term, it either promotes denial (from those who think that its all hyperbole) or doomerism (from those who think that none of it is hyperbole). Hyperbole does not promote hope, wh
199.
by cmdli 4y ago
> But why can't this be true? Numerous studies have shown that genetic and particularly cultural traits produce vast differences in cognitive ability. Most recently for instance in a story about Korean twins separated at birth[1]. L
200.
Lets talk about blockchains(cmdli.dev)
309 points by cmdli 4y ago|299 comments
201.
Show HN: Generate a unique cute robot for your public key(rsabots.com)
1 points by cmdli 4y ago|0 comments
202.
Ask HN: How you do secure your APIs?
16 points by cmdli 4y ago|8 comments
203.
by cmdli 4y ago
Ah, that’s a cool idea. I had originally thought of this idea when working on another cryptography project; it would be cool to integrate with existing PKI.
204.
Show HN: RSABots – A Unique, Cute Robot for Your Public Key(rsabots.com)
6 points by cmdli 4y ago|3 comments
205.
by cmdli 4y ago
Poison pill shares are new shares, issued by the company and then sold to existing shareholders (with the exception of anybody who owns more than say, 15%). Since these shares are sold at a discount to the current market price, it is arguab
206.
by cmdli 5y ago
When that gap is rapidly closing, I don’t think it’s weird to speculate how it will go in the future. We saw something similar with college attainment, where women were being pushed out and are now the majority, which is causing pains with
207.
by cmdli 5y ago
Because it is evidence of a broader trend, where womens’ and mens’ pay is equalizing for people under 30. This has long been predicted by some given the gap in college attainment. What remains to be seen, and what has people acting weirdly,
208.
by cmdli 5y ago
Ultimately, this is about freedom for tech companies, not users. Users will have to use whatever the tech companies give them, and tech companies are always going to do things that benefit themselves the most. I wouldn’t be surprised if use
209.
by cmdli 5y ago
Honestly, what are people's thoughts on automatic updates being built into the OS? They can be good for patching security vulnerabilities, but automatic updates are also incredibly unpopular (see Windows). I personally wouldn't wa
210.
by cmdli 5y ago
I just don't see how that use case couldn't have been more easily served with a boring old centralized database. Why do you need a trustless system where all the users are either in-house or contractually obligated to not screw ea

More ›