rkeene2

9 ms·

91.
by rkeene2 3y ago
You can use ChiselApp.com (which I maintain) to host your Fossil as well, and since every clone has the same data (minus passwords) it's trivial to migrate.
92.
by rkeene2 3y ago
I did (along with the help of several other people finding, building, and testing tools) the migration of Tcl from CVS to Fossil during the great Sourceforge outage. We looked at many options for migrating to such as Darcs, Git, Bzr, and M
93.
by rkeene2 3y ago
No, it was after that -- I still worked at AWS at that point. Additionally, the tests were done with provisioned capacity at DynamoDB tables.
94.
by rkeene2 3y ago
You can scale Spanner up/down based on demand although there is a lag time with it. I built a system that relies on a high-performance database and tested with both AWS DynamoDB and Google Cloud Spanner (see disclaimer) and was able to
95.
by rkeene2 3y ago
No... A passkey is specific to a context (RP), which is why they're not stored on things like Yubikeys (which I think a lot of people in this thread are confused about -- the keying material on the Yubikey isn't enough to create t
96.
by rkeene2 3y ago
Let me know if you have any questions (email in profile) ! Also check out CERN VM-FS [0], which is a similar idea, but AppFS has a simpler protocol and the implementation supports writing (writes by a user go to their home directory, so ea
97.
by rkeene2 3y ago
Or AppFS (which I wrote), which gives you all the same benefits of Nix but with less work, though currently has way less packages.
98.
by rkeene2 3y ago
I created something similar for Tcl called pipethread [0] [1], but using something closer to the pipe syntax. It has a lot of interesting features that would be difficult to replicate in JavaScript. [0] https://wiki.tcl-lang.org&
99.
by rkeene2 3y ago
It's already pretty easy to use SSH over TLS using stunnel or any other thing that can do TLS to TCP proxies (socat, haproxy). On some external system you just setup stunnel/socat/haproxy to listen on port 443 with TLS and pr
100.
by rkeene2 3y ago
That's significantly more powerful than workstations I used for a long time, where I ran Linux, Solaris, HP-UX, DOS, OS/2, and Windows. Excluding really small machines that didn't do well with multitasking, I used a 486 DX2 5
101.
by rkeene2 3y ago
If you do want a stronger security boundary, you can do that without using cgroups and other kinds of namespaces (aside from chroot) pretty easily using something like `firejail` -- that's what I do for this demo [0] (all the software
102.
by rkeene2 3y ago
Hi. The short answer is no. The way our system works, the legal address of the end-user determines which bank the bank account is within -- this is largely due to regulatory requirements within the various banking systems. There is one mec
103.
by rkeene2 3y ago
I have a bit more information than you on the topic. We provide bank accounts, this includes checking and savings in the US.
104.
by rkeene2 3y ago
Hi. My company, Keeta [0], is making this available in many countries, including the US. [0] https://keeta.com/
105.
by rkeene2 3y ago
So I see the problem now, your model includes a hidden assumption that password resets go to email -- this is not always the case.
106.
by rkeene2 3y ago
This is how the banking app my team built works -- on Android/iOS devices a hardware-backed keypair is generated and when a login is needed, the keychain is unlocked using local biometrics to perform a signing operation which authentic
107.
by rkeene2 3y ago
The best part is that the US Government already did this -- it runs the second largest PKI. Second only to the Internet. It has issued more than 20 million certificates to individuals.
108.
by rkeene2 3y ago
I actually built this using my on-premises cloud platform in the past [0]. It was using Service Templates from OpenNebula, and would automatically scale the VMs based on number of users, setup the load balancer, acquire an TLS certificate,
109.
by rkeene2 3y ago
It's really unclear to me why you think that email would be involved in any other capacity than 2FA in this scenario. Are you imagining that email is used in some other additional way in the authentication process, such as account reco
110.
by rkeene2 3y ago
Are you arguing that because they won't have something providing benefits until "well into 2024" that they have not started as of the time of my comment ?
111.
by rkeene2 3y ago
The same situation seems to be true of SMS, if you have gained access to their account then you can use that to perform 2FA as well. In this situation, it doesn't seem to be significantly different in terms of security. To answer your
112.
by rkeene2 3y ago
While it's possible that Google hasn't said they'll be doing the updates separately for the browser there's no reason to suspect they wouldn't do that once LaCrOS was fully implemented -- after all, it works under L
113.
by rkeene2 3y ago
They have started doing just that with "LaCros" [0]. [0] https://chromium.googlesource.com/chromium/src/+/main/docs/l...
114.
by rkeene2 3y ago
How is SMS two factor when email is not ? Separate from that, it is not productive for you to tell me to think about it more -- for all you know I've implemented two factor authentication in various forms for decades (from OPIE when I
115.
by rkeene2 3y ago
The world's largest employer (US Government) uses Smartcards (and no passwords).
116.
by rkeene2 3y ago
In what way is email worse than SMS ?
117.
by rkeene2 3y ago
I've been using Linux and UNIX (Solaris, HP-UX) on my workstation since 1999. I did a 2 year experiment on using a (non-rooted) Chromebook as my only machine and it works fine for everything except the terrible window management, very
118.
by rkeene2 3y ago
If you want something different, but aren't as concerned about performance you can use User-Mode Linux to do this, which I used to use to isolate package building as well as working around bugs in BtrFS. I have a simple script here [0
119.
by rkeene2 3y ago
To be clear I wasn't volunteering just encouraging anyone who wanted that outcome to just try it, it's probably easier than one might think
120.
by rkeene2 3y ago
I had more luck with KDrive for a minimal but functional X server (for an OS installer in my case).

More ›