hdhzy

45 ms·

451.
by hdhzy 10y ago
That's why I like games such as Chrono Trigger: basically no random encounters, you can see and avoid most enemies my running around etc. Most of the value of such games comes from the story. You're interested in how it's goi
452.
by hdhzy 10y ago
It's also a question whether the activities are really important if you need tricks like that (pretending to be the authority) to get people to act...
453.
by hdhzy 10y ago
I just put these events on Google Calendar. Easy to do from mobile phone and searchable.
454.
by hdhzy 10y ago
You capture the token along with the request on mitmproxy.
455.
by hdhzy 10y ago
Can anyone comment if TLS Token Binding [0] does solve some subset of problems usually solved with JWT? It seems to be scheduled for implementation in several clients [1]. [0]: https://tools.ietf.org/html/draft-ietf-tok
456.
by hdhzy 10y ago
Why not just use Bitcoin? [0] [1] [0]: https://en.bitcoin.it/wiki/Contract [1]: https://curiosity-driven.org/bitcoin-contracts
457.
by hdhzy 10y ago
Wow, thanks for this excellent resource and links!
458.
by hdhzy 10y ago
Well even with reproducible builds how do you check what actually is running there? That'd be the ME reporting "I'm running version X" without a way to really verify it. Also if you flashed it you cannot be 100% sure the
459.
by hdhzy 10y ago
As far as I remember BeyondCorp required users to be equipped only with attested hardware (no BYOD). This device's health then was constantly being monitored and taken into account when granting / denying access. I'd like to
460.
by hdhzy 10y ago
Very cool. I've been thinking about something like that for a long time. I also don't mind paid solution if it'll be open source.
461.
by hdhzy 10y ago
They shouldn't have access to card number and CVV either way because usually they are not PCI-DSS certified. Stripe handles that in an iframe (requirement of PCI). CVV cannot be stored at all even by Stripe.
462.
by hdhzy 10y ago
One caveat: Bitcoin doesn't choose longest chain by the number of blocks but rather the difficulty, see https://en.bitcoin.it/wiki/Difficulty
463.
by hdhzy 10y ago
What I'm missing in the article is some sample Svelte component and the resulting JS after compilation.
464.
by hdhzy 10y ago
I think the truncation is considered because a lot of software assumes git commit id has 160 bit length. It's not because of performance.
465.
by hdhzy 10y ago
> without the overhead of maintaining an ever-growing list of roles For me it sounds like roles are being replaced with new set of derived attributes (isOver18, is6feetTall) that you'd still need to compute when the government polic
466.
by hdhzy 10y ago
You can also turn on touch-to-use policy so that you have to touch the yubikey each time you want to use the key.
467.
by hdhzy 10y ago
Something like https://www.bitmessage.org/wiki/Main_Page ?
468.
by hdhzy 10y ago
There is an RFC extension for OpenPGP that does just that: https://tools.ietf.org/html/draft-vb-openpgp-linked-ids-00 It's implemented in Android OpenKeychain.
469.
by hdhzy 10y ago
Very interesting. You don't have any need for persistent storage that exceeds the amount of information that can be remembered? (E.g. work artifacts, photos, passwords)
470.
by hdhzy 10y ago
Yes and yes.
471.
by hdhzy 10y ago
W.r.t yubico u2f you don't backup it you just register to or more tokens that work as backup keys.
472.
Apple CEO Tim Cook Cashes in Another $3.6 Million in Stock - Mac Rumors(macrumors.com)
1 points by hdhzy 10y ago|0 comments