elderlybanana

3 ms·

1.
by elderlybanana 9mo ago
Yes, TOTP is a secret + computation, and generating it is trivial once you have the secret. The security difference is that the TOTP secret is separate from the user’s password and the output is short-lived. Each of the two factors address
2.
by elderlybanana 2y ago
In my experience, juniors don't know how to do a secure setup, and busy seniors are often willing to cut corners to complete business-critical tasks. Application secrets management needs a better default setup. The standard for applica
3.
by elderlybanana 2y ago
Maybe reading about passkeys imminent death on HN?
4.
by elderlybanana 3y ago
My favorite chili oils take the chilis just beyond a perfect maillard "sear" and venture very slightly into burnt territory. Many peppers have a natural bitterness when dried, and that slight bitterness added from the barely burne
5.
by elderlybanana 3y ago
I think understanding this distinction is going to be one of the main challenges for mainstream WebAuthn adoption over passwords as the default authentication method.
6.
by elderlybanana 3y ago
> It sounds like you want to trivialize a problem that has existed for way longer than computer science and systematically relies at some point on human memory if you want a certain level of security and secrecy. Assuming the "probl
7.
by elderlybanana 3y ago
In response to this post, I just open sourced a starter project to a variation of this idea: https://github.com/secretlessai/audio-mnist . I've been interested in doing image classification techniques like CNN on a
8.
by elderlybanana 3y ago
Incredible work, this is the most exciting AI dev tool I've come across! Do you have a strategy to supplement ChatGPT to handle post-2021 updates to languages and libraries? I tried it on a NextJS repo and it came up with something tha