ecesena

72 ms·

811.
by ecesena 8y ago
I don't think we understand each other. If a device gets in the hands of the attacker, I won't assume he/she's going to use your code and obey to your restrictions. The primary device contains the key, that the attacker
812.
by ecesena 8y ago
An attacker in possession of the primary device can increment the counter, making the primary still working, and invalidating the backup. In crypto, keys are secrets, the rest can’t be relied on for security. Edit: grammar
813.
by ecesena 8y ago
In my method no one knows the key. In the article, you have the key in an env variable. In particular, if someone prebuilds the keys for you, he/she has you key.
814.
by ecesena 8y ago
What do you think about a protocol like: https://news.ycombinator.com/item?id=17770803
815.
by ecesena 8y ago
Assuming there's a real case where you want a backup, i.e. you fear physical damage, but don't fear lost/stolen. For consumers, I believe that the distinction between broken vs lost/stolen is very hard to explain. Think
816.
by ecesena 8y ago
Incidentally I was talking to Conor about this problem yesterday. This post, in very short, proposes to flash two devices with the same key. I think this is great for hackers & makers, but not for consumers. Moreover, it might be conven
817.
by ecesena 8y ago
Why not Github pages? Has anyone measured performance? CDN is always an option you can add on top, if you don't like Github's one.
818.
by ecesena 8y ago
CSP is a good investment. My colleague gave a talk at BSidesSF with (I think) good recommendations on how to enforce better CSP in practice: https://youtu.be/MNT0O94FYTg
819.
by ecesena 8y ago
Perhaps genus for hyperelliptic curves, or dimension for abelian varieties?
820.
by ecesena 8y ago
Mostly volume & brightness. In some rare cases I use it for emoji, but it's typically faster to get them from iMessage and copy & paste. I tried with screenshots and lock screen, but I'm too used to the keyboard shortcut a
821.
by ecesena 8y ago
Open source security keys: https://solokeys.com . For me it's cool because I'm learning more about hardware -- I studied maths, so not really focused on physical things. For the world, I think/hope it's cool b
822.
by ecesena 8y ago
The same is true also for eth and many other cryptocurrencies. The only thing that changes is how from a point (public key) you derive the final address, and which alphabet you use to encode it in a readable form.
823.
by ecesena 8y ago
I built the one at Theneeds.com and, if you're interested, this is the one at Pinterest [1]. At Theneeds we were recommending news = fresh content based on user's interest and other features. Because the content is fresh, you can&
824.
by ecesena 8y ago
For me it's all about learning. I typically pair something technical I want to learn and something more "creative" or outside of my primary skills, this way the learn success is guaranteed. For learning to happen, I really ne
825.
by ecesena 8y ago
Google for domains. Github pages for hosting (static content, shopify in about 3mo).
826.
by ecesena 8y ago
I’d add: what’s your target market? It reads a bit “everyone”, which I don’t thinks it’s a great idea.
827.
by ecesena 8y ago
Update: I'm going to this hackathon in SF https://www.meetup.com/noisebridge/events/252774745/
828.
by ecesena 8y ago
Security keys for two factor auth with fido2. I’ll start drafting the kickstarter campaign, and probably I’ll play around 3d modeling/printing some cases. Maybe also improving the website: https://solokeys.com , and, why not
829.
by ecesena 8y ago
Stripe Atlas can incorporate you and includes equity agreements.
830.
by ecesena 8y ago
Google App Engine is great & free for low volumes of traffic. I use it for my crypto dashboard: https://priceeth.github.io/ Github pages if it's static enough, or for any static part. If the amount of data is small
831.
by ecesena 8y ago
We do them on Tue & Thu, mostly for blockers. Maybe you can reduce the frequency.
832.
by ecesena 8y ago
I'd say it depends on the security model. I have a yubikey nano permanently in my mac, I use it for example for vpn. Of course, I don't use it to unlock my mac, and I have a pretty long passphrase for that (and an apple watch to m
833.
by ecesena 8y ago
If size doesn't matter, U2F Zero [1] is an open u2f security key. And we're about to unveil the upgrade to fido2... Edit: added link [1] https://u2fzero.com
834.
by ecesena 8y ago
If you work on the intersection of the fields, blog about the intersection. You’ll get less but more qualified leads. If you work on the union, I’d personally blog just about the fields that gets you more money, and then try to upsell the o
835.
by ecesena 8y ago
Try in incognito, it will tell you if it’s them or a browser issue (plugin, cache, ...)
836.
by ecesena 8y ago
Sending email to many people means there can be errors in sending, and it will be read on many different client and devices. Mailchimp offers you a reliable way to send, and templates that are pretty well tested. In addition to many more fe
837.
by ecesena 8y ago
In addition to editors and notes, I user mail, terminal, and IMs. IMs are really important to me -- basically for everything I care about being notified, I prefer an app rather that in-browser.
838.
by ecesena 8y ago
Do services for other crypto companies count? If so, there are some, along the lines of helping creating tokens, validating code security, building wallets, and of course helping with the ico process.
839.
by ecesena 8y ago
Password algorithms, aka deterministic password managers, are usually pretty strong, specifically as strong as the master password(s) you use. Meaning that it’s usually easier to guess the mp than to reverse the algorithm. Personally, I hav
840.
by ecesena 8y ago
Does IIIm mean 111m or 3m (roman number)?

More ›