rkeene2

46 ms·

1. 481.▲
   by rkeene2 8y ago

   There was e-commerce before cookies. The same functionality of correlating multiple requests for a single request (building sessions upon packets) was just more difficult to use by encoding the session ID as a parameter in query string for
2. 482.▲
   by rkeene2 8y ago

   I thought Fi and GSuite already didn't get along ?
3. 483.▲
   by rkeene2 8y ago

   Your link says, and it is also my understanding, that this only affects GSuite users, not the majority of Hangouts users. Is there any indication that most people will be affected ?
4. 484.▲
   by rkeene2 8y ago

   I added SSH agent on ChromeOS support to my CAC/PIV middleware (which supports many platforms), but I have not yet released it. Is anyone interested in testing it out ? https://cackey.rkeene.org/fossil/artifact?ln
5. 485.▲
   by rkeene2 8y ago

   Millions of US Government users have no passwords.
6. 486.▲
   by rkeene2 8y ago

   Most smartcards require you to authenticate to them before they will perform operations using their private cryptographic keys. I'm adding WebAuthn support to my smartcard middleware [0]. [0] https://cackey.rkeene.org/
7. 487.▲
   by rkeene2 8y ago

   Sadly, using wireguard would come with some notable drawbacks since the protocol isn't as flexible as tinc's. First while the control plane would be TCP (since it's low traffic), the data plane would then be UDP-only leading
8. 488.▲
   by rkeene2 8y ago

   There were some issues in 1.0 that are fixed in 1.1, for which the protocol is not yet finalized although the beta releases are stable. The lack of a final release is annoying, since it does not guarantee upgrades will work with older clie
9. 489.▲
   by rkeene2 8y ago

   I think you'll like AppFS http://AppFS.rkeene.org/
10. 490.▲
    by rkeene2 8y ago

    I have used tinc [0] for this scenario successfully for 15 years. It not only supports full mesh but automatic full mesh. It will use UDP for the data stream when possible, supports RSA and Ed25519, and supports transporting either IP or
11. 491.▲
    by rkeene2 8y ago

    RediSQL looks interesting and I like the pricing structure. I'm working on marketing my own set of products so I know it's difficult to keep it up. Good luck with this venture and I hope it works out for you and your team.
12. 492.▲
    by rkeene2 8y ago

    The first version of Redis: https://gist.github.com/antirez/6ca04dd191bdb82aad9fb241013e...
13. 493.▲
    by rkeene2 8y ago

    Hi, I have a terminal that's reachable from the public Internet that lets you execute arbitrary code: http://rkeene.org:8080/
14. 494.▲
    by rkeene2 8y ago

    I'm sure I could build one if you want. I maintain some smartcard middleware that works in Chrome (as a certificate provider, and on Windows, macOS, Linux, Solaris, HP-UX, etc) called CACKey: https://chrome.google.com/
15. 495.▲
    by rkeene2 8y ago

    They also removed support for mandatory features of HTTPS [0], as defined in RFC 2818. Not that I'm against the change /per se/, but there correct way to go about it is to change the standard. They also claimed Firefox was d
16. 496.▲
    by rkeene2 8y ago

    Certainly many other operations require a tamper-proof channel, and many more things can go wrong without one but I believe the author was trying to indicate the specific requirement here rather than making a specifically incorrect statemen
17. 497.▲
    by rkeene2 8y ago

    If the private key cannot be read by anyone and the user must authenticate to get the device to sign the authentication request, then it could be considered 2 factor by some interpretations.
18. 498.▲
    by rkeene2 8y ago

    I believe the statement is most charitably interpreted as the channel must be secure against modifications so that when you are attempting to put the public key in the file that some other contents aren't inserted instead.
19. 499.▲
    by rkeene2 8y ago

    A lot of research and hard work has gone into TclQuadCode [0], which compiles Tcl (which is even more dynamic than JavaScript) into machine code via LLVM. The authors indicated at one point it took around 5 PhDs to get it going. [0] https:
20. 500.▲
    by rkeene2 8y ago

    It's using Fossil 2.7 for everything.
21. 501.▲
    by rkeene2 8y ago

    I usually leave release engineering tasks such as denormalizing data (generating derived files) to release time and Fossil has a particular place to keep these bits, as unversioned artifacts (which are optionally synced, on a per repository
22. 502.▲
    by rkeene2 8y ago

    I run ChiselApp.com if there are any questions about it. I inherited it from James Turner, the creator of it.
23. 503.▲
    by rkeene2 8y ago

    OpenSSH also supports certificates, so you can have the host system provide a certificate identifying it -- but you have to setup a CA, and arrange for new hosts to securely have their host keys signed by it.
24. 504.▲
    by rkeene2 8y ago

    Regular Chromecast outputs to HDMI, Chromecast Audio outputs to 3.5mm analog stereo audio. This (the 3.5mm analog stereo audio) is very much superior for hooking up to speakers around the house.
25. 505.▲
    by rkeene2 8y ago

    I've been using gotty with great success for a while.
26. 506.▲
    by rkeene2 8y ago

    Even better, don't link to some random version in GitHub but use the Fossil version on SQLite's site: https://sqlite.org/src/artifact?ln=43-66&name=48388821692e87...
27. 507.▲
    by rkeene2 8y ago

    Maybe YOU don't... yet... https://2ton.com.au/rwasa/ :-)
28. 508.▲
    by rkeene2 8y ago

    16 bytes isn't always enough to store an IPv6 address. Depending on the requirements, you may need to store a fully scoped IPv6 address, such as fe80::1%eth0. Edit to note: I store the fully scoped IPv6 address in a database as part of
29. 509.▲
    by rkeene2 8y ago

    I used UML to do this very thing 15+ years ago !
30. 510.▲
    by rkeene2 8y ago

    Tcl.