ecesena

52 ms·

601.
by ecesena 8y ago
How long after dinner do you go to run? And how long or far do you usually run?
602.
by ecesena 8y ago
Video from BSidesSF 2019, highly recommended: https://youtu.be/ZukUmZSKSek
603.
Kong raises $43M Series C for its API platform(techcrunch.com)
1 points by ecesena 8y ago|0 comments
604.
by ecesena 8y ago
DuckDuckGo gave a great talk at Shmoocon 2019 about their tracking and a/b testing: https://youtu.be/oFkmqiwX5vk
605.
Details about the Side-Channel Attacks on Trezor One Hardware Wallet(medium.com)
1 points by ecesena 8y ago|0 comments
606.
by ecesena 8y ago
re: your thread. Today the backup practice is to enable 2 keys in all accounts: one that you keep with yourself, the other that you leave in a safe. There's been some experiments of creating copies of the master secret, e.g. [1]. Today
607.
by ecesena 8y ago
Microsoft also supports passwordless login, the "novelty" of FIDO2. I just found it out yesterday reading this article [1], page 3 (it's in German). Disclaimer: I make the Solo key that's mentioned in the article. [1] h
608.
by ecesena 8y ago
I think this is because of Google - they only allow registration via Chrome (to the best of my knowledge). But then you should be able to use your key from Firefox.
609.
by ecesena 8y ago
Pretty sure you can already use it. You can't register it currently.
610.
by ecesena 8y ago
Note that if you enable 2fa with Chrome, then you can log in with Firefox. Just adding/removing keys (in Google) doesn't work.
611.
by ecesena 8y ago
I have a related question. YC has a rule of thumb of $15K per engineer times 18 months [1]. Any "rule of thumb" for how much to add for manufacturing? Say, in their example, a software startup asks for $1.35M for a team of 5. What
612.
by ecesena 8y ago
Start by sharing your link on Show HN.
613.
by ecesena 8y ago
Getting there, dependency's in: https://github.com/solokeys/solo/pull/120
614.
by ecesena 8y ago
Security keys: https://solokeys.com
615.
by ecesena 8y ago
Independent and out of curiosity, do you ever have to run things like a cmd over ssh in parallel across multiple servers? Just curious to understand if a “long touch” or something that “unlocks” your private key temporarily would be interes
616.
by ecesena 8y ago
Totally second this. A secret copied is no longer a secret.
617.
by ecesena 8y ago
no, I want to abbr I use v, and a for att.
618.
by ecesena 8y ago
To play devil’s advocate, to me plaintext means I want to finish quickly because you haven’t asked and are paying too little, while any solution other than bcrypt/pbkdf2 means I don’t know what I’m doing.
619.
by ecesena 8y ago
I sincerely hope you’re kidding and the people who replied positively are your fake accounts. By doing that, you’re app will be almost immediately blocked, hopefully banned, and likely also the user accounts banned. The right way to do it i
620.
by ecesena 8y ago
Hardware! Mostly stm32 to be useful at solokeys, arduino to do a meaningful porting, and I was excited about Android things but news are saying it’s no longer a thing... looking forward to learning about the next thing.
621.
by ecesena 8y ago
Webauthn is pretty popular these days, and there’s little built in terms of ecosystem. I’m sure there’s plenty of opporunities for modules. One silly example: I bet everyone in the world has uint64 for user ids... webauthn wants a byte arra
622.
OWASP Application Security Verification Standard 4.0(owasp.org)
6 points by ecesena 8y ago|0 comments
623.
by ecesena 8y ago
I worked for about 6 months at MemSQL while we were selling our startup Theneeds (and now I have a full time job while launching SoloKeys, so I can see also the "growing your startup" option). My experience with MemSQL has been aw
624.
by ecesena 8y ago
Last year both my sister and I, and my mom and dad had sexy prime years. The coolest thing is that all my family of 5 had a prime number of years, pretty incredible. I wrote about it here: https://medium.com/@0x0ece/pri
625.
Solo, open security key, is (back) MIT+Apache2(github.com)
1 points by ecesena 8y ago|0 comments
626.
by ecesena 8y ago
For us, SoloKeys, it was via Kickstarter [1]. We have blogged for a couple months before the campaign, typically sharing on HN where we hit the front page 2-3 times. Overall we signed up 2.5K emails that then helped funding the campaign ver
627.
by ecesena 8y ago
We use Teletraan [1], if you look just at the first pic in the repo you can see a "Deploy History". Internally it tracks: timestamp, type of deploy (regular, rollback), state (succeeded, aborted, running), success (% on the fleet)
628.
by ecesena 8y ago
React statically hosted on Github pages. Analytics on Google Analytics or Amplitude. Whenever I can, no backend. If I need, either Google spreadsheet, Firebase, App Engine... let's say I choose the one with less maintenance, depending
629.
by ecesena 8y ago
> This type of phishing is precisely the kind of threat that two-factor authentication is supposed to protect you against. I've never seen an article so imprecise. 2FA protects against account takeover, not from phishing. In fact, m
630.
by ecesena 8y ago
This is very nice, clean and to the point, I really enjoyed it. I was looking for articles similar to this as an inspiration for a series I want to write shortly. This is definitely bookmarked. For more context, we're working on Solo,

More ›