lvh

87 ms·

781.
by lvh 8y ago
Wait, seriously? Not even the OpenPGP applet/with ykman configuration? In what modes does it do that? That’s send-it-back bad.
782.
by lvh 8y ago
They tend to be the websites that matter a lot.
783.
by lvh 8y ago
You can get a U2F device that lives in your phone’s SEP, right now, for free. U2F kegs are not $50. https://krypt.co/
784.
by lvh 8y ago
It works in iOS Chrome but only on Google properties. I agree Safari is a problem, I’m not sure it’s the only pinch point. They managed to glue it all together with app links and URL schemes. (Chrome on iOS works fine with Krypton on the sa
785.
by lvh 8y ago
It's not built into the protocol, sure, but the device can do whatever it wants before it decides to sign something. You need to unlock my phone and SEP before Krypton signs anything, for example. But you still raise a good point: I su
786.
by lvh 8y ago
Some actors doing unsafe things should not preclude us from building safe things in the mean while. Google/GSuite accounts matter. GitHub accounts matter.
787.
by lvh 8y ago
The spec doesn't insist on it, but that's how Yubico devices do it, yes. It's the straightforward thing to do when your scheme eventually relies on ECDH and there's an obvious and performant way to go from a base secret
788.
by lvh 8y ago
Because one day we'd like to securely authenticate to things on phones in phone browsers. (I agree that it's not a big a deal as one may think; it only matters if you're logging in to a critical service via the browser and no
789.
by lvh 8y ago
U2F keys make you basically immune to phishing.
790.
by lvh 8y ago
> U2F can only be used as a second factor. I mean, certificationally, sure. But what prevents a website from trusting you to input your identifier (user name or e-mail address) and then accepting a U2F signed blob as your only credential
791.
by lvh 8y ago
I think the YK5's biggest problem is that the YK Neo and 4, which have been out for years, were already so good. Unless you really care about NFC at the same time as RSA-4096, I'm not sure I see a big impetus to upgrade. Hopefully
792.
by lvh 8y ago
Why doesn't BDFLhood scale? Eventually people step down (Python, now Linux) -- but I'd say those projects have been wildly successful.
793.
by lvh 8y ago
Effectively, yes. Curve25519 has a few tricks that make this hard to do: it defines a curve compression format that mandates using 32-byte public keys and uses a single-coordinate ladder. It has the same property that points not on the curv
794.
by lvh 8y ago
Despite being the Sage fanboy in the thread, I have to admit that all the use I've seen of Sage has been academic or experimental; I haven't heard of anyone using Sage for statistics in any context, and not for quants or actuarial
795.
by lvh 8y ago
I'll give it a shot: Sage is what happens when you build a computer algebra system on a giant pile of existing open source libraries and give it a nice, consistent interface and a ton of starving postdocs to write cool integrations and
796.
by lvh 8y ago
Sage is wonderful. It has a huge number of uses but I mostly use it for cryptography. Sage has the best (certainly open source) support I know of for a myriad of things like group theory and elliptic curves. Here's a short example for
797.
by lvh 8y ago
You misparsed that sentence. The small companies offer better salaries, the large company cuts labor costs, by cutting labor costs they can compete on price, by competing on price they win market share, meaning small companies go out of bus
798.
by lvh 8y ago
I worked with most of the founders directly at the Rackspace SF office. They're great people and know what they're doing. You should absolutely work here if you care about things like Kubernetes and Terraform.
799.
by lvh 8y ago
Too complex. Partially legal, partially because that's not where our customers are. Since we're so embedded with our customers over an extended period of time, there's more reason for them to be squeamish about data leaving t
800.
by lvh 8y ago
We haven't audited this personally but I'm lsoking forward to doing so. This looks awesome -- my only problem is that it doesn't solve U2F/WebAuthn on the phone itself, which is still a lot more complicated on iOS than
801.
by lvh 8y ago
We wrote a big-ol blog post about inter-service auth that has a lot of relevant stuff: https://latacora.micro.blog/2018/06/12/a-childs-garden.html RLS means your database understands what a user is allowed to
802.
by lvh 8y ago
Even if we accept the assumption that you actually have to avoid it (I don't!),here are some: - Database permissions, including row-level security - Macaroons - PASETO - Fernet/secretbox/HMACing a JSON blob These are differen
803.
by lvh 8y ago
> The "you're going to hit the database anyway" argument whilst probably accurate in most cases, doesn't invalidate that JWT allows for one or more fewer database hits on every request. Using random session cookies do
804.
by lvh 8y ago
We see JWT a lot. It's usually an accident and not really solving a problem. Some notes for this blog post: - It does not cover the worst issue with JWT (IMO): you don't get revocation by default. Some vendors use JWTs and still h
805.
by lvh 8y ago
This is related to the recent disclosure about how open redirects in Google Chat can lead to RCE [0]. The bugs are related to security features not being correctly inherited across child windows (e.g. iframes). [0]: https://blog.
806.
CVE-2018-15685 – Electron WebPreferences Remote Code Execution(contrastsecurity.com)
2 points by lvh 8y ago|1 comments
807.
by lvh 8y ago
Article has a timeline specifying $5000.
808.
by lvh 8y ago
Train your ICs to be better at spotting risky behavior. They don't have to be able to exploit and fix the bugs: they just have to know when to ask for someone else to look at it. One thing we've found to be effective here: we star
809.
by lvh 8y ago
'tptacek and I were just discussing this the other day for dependencies (both libraries and vendors). ICs in technical and non-technical roles ask us if a particular dependency is OK, and we evaluate it. Examples include the privileges
810.
by lvh 8y ago
I don’t know what you had in mind for “large”, but I can tell you how it’s working out for us. - Most customers write design docs/tickets. This helps because we can suggest alternative approaches early. It’s rare that we tell people th

More ›