psanford

53 ms·

601.
by psanford 7y ago
www.passwordless.dev has a demo passwordless fido2 login workflow that will trigger the fido2 pin prompt in Chrome.
602.
Help me ask why you didn't just(blog.plover.com)
3 points by psanford 7y ago|0 comments
603.
by psanford 7y ago
The author says low TTLs are bad because of latency but never attempts to quantify how much latency we are actually talking about. Its hard to know how outraged I'm supposed to be without actually seeing the numbers. It seems that a lo
604.
by psanford 7y ago
Here's a blog post from Russ Cox (Go core team) explaining it: https://research.swtch.com/gorace
605.
by psanford 7y ago
If you are just using AH you aren't encrypting your traffic so it isn't really comparable to wireguard or openvpn.
606.
by psanford 7y ago
In my organization there are certain operations that we require you to have authenticated with 2fa in order to perform them. For the CLI or terraform this means using something like awsmfa. There's no way of doing that with a FIDO key.
607.
by psanford 7y ago
Filippo Valsorda (Go's current crypto maintainer) took a little bit of time to look at the cryptography used by restic: https://blog.filippo.io/restic-cryptography/
608.
by psanford 7y ago
I'm trying to say that all hardware tokens are not created equally. A hardware RSA TOTP-esque fob offers no phishing protection where as a FIDO key does. Its unfortunate this site doesn't distinguish between those two cases.
609.
by psanford 7y ago
Didn't this page used to say whether or not a site supported U2F specifically or was that some other very similar looking page? Its unfortunate that they don't have this information. I would switch services to a site that specific
610.
AMD’s Secure Encrypted Virtualization Came from Work on Consoles(tomshardware.com)
3 points by psanford 7y ago|0 comments
611.
by psanford 7y ago
The article is specifically talking about how the phrase "special register groups" has been picked up and included in the definition of a CPU in computer architecture text books over the past 60 years. Its clearly not trying to ma
612.
by psanford 7y ago
If you asked me what the "basic parts of a computer are" my first intuition is to answer with the von Neumann architecture. I would not expect the general public to have that answer, but I would expect people with CS backgrounds a
613.
by psanford 7y ago
There's no bait-and-switch going on here! They've always been perfectly clear in how much storage you get for free. They've never reduced that amount, they have only increased it over time.
614.
by psanford 7y ago
I want better windowing security, but I also need to be able to present my desktop in a video conference call. Expecting people to switch before they can do normal desktopy things isn't reasonable.
615.
by psanford 7y ago
Do you think quad9[0] is a trustworthy organization? [0]: https://www.quad9.net
616.
Two kernel mysteries and the most technical talk I've ever seen(brendangregg.com)
75 points by psanford 7y ago|0 comments
617.
by psanford 7y ago
I suspect a big part of it is people don't want to learn a subset of haskell to in order to effectively use their package manager.
618.
Introducing Ent(entgo.io)
2 points by psanford 7y ago|0 comments
619.
by psanford 7y ago
I don't know. In my mind I consider backblaze to be a competitor to S3. Has S3 ever raised prices? It's honestly hard to imagine S3 ever raising prices (not that they couldn't, just that they have made it part of their market
620.
CSRF is really dead(scotthelme.co.uk)
313 points by psanford 7y ago|113 comments
621.
by psanford 7y ago
Interesting. I remember a short period where Seagate was really hyping their own ethernet connected key/value hard drives back in 2015[1]. It seems like that project died and this appears to be a completely different API (and not ether
622.
by psanford 7y ago
Lots of code uses octal. Its still the standard way of notating file permission bits on unix: os.Chmod(filename, 0777). You would break so much code if you just threw that away.
623.
GDPR is an identity thief's dream ticket to Europeans' data(theregister.co.uk)
68 points by psanford 7y ago|34 comments
624.
by psanford 17y ago
What about open source apps. Do you force your users to register for their own consumer key just to use your application?