timothy-quinn

6 ms·

1.
by timothy-quinn 6y ago
This is how most critical articles of crypto end. They criticise the algorithm or system, and then don't offer much in the way of solutions. They _do_ suggest using ECC, but in practice ECC support is super sporadic, and a lot of produ
2.
The Cheapest Online Documentation Repository for Startups(blog.congruentlabs.co)
3 points by timothy-quinn 6y ago|0 comments
3.
Why Blockchains are not the answer to Voting Systems (yet)(blog.congruentlabs.co)
9 points by timothy-quinn 6y ago|0 comments
4.
by timothy-quinn 6y ago
The value of hooks became apparent to me after working with a very large react-redux application. It was so large and the forms had so many elements that the capture of data, testing, and subsequent state management in redux was enormous. I
5.
by timothy-quinn 6y ago
Thanks to this I've found building a product in the cryptocurrency market has been the most challenging for applying typical online marketing strategies - I've exhausted most avenues of advertisement - basically the only tools lef
6.
by timothy-quinn 6y ago
Support for PIV cards on Linux/Mac is kind of sporadic, and very much DIY. In most cases authentication gets kind of tricky because you need to set up everything yourself on the workstation. For web-based certificate authentication, if
7.
Using PIV Cards for Every Business(blog.congruentlabs.co)
4 points by timothy-quinn 6y ago|2 comments
8.
Signata 1.1.1 – Importing your YubiKeys(blog.congruentlabs.co)
1 points by timothy-quinn 6y ago|0 comments
9.
Understanding cold storage wallets, and why they don't need to be so cold(blog.congruentlabs.co)
1 points by timothy-quinn 6y ago|0 comments
10.
Building Trust, and how we never see your Cryptocurrency Private Keys(blog.congruentlabs.co)
1 points by timothy-quinn 6y ago|0 comments
11.
Building Trust, and how we never see your Cryptocurrency Private Keys(blog.congruentlabs.co)
3 points by timothy-quinn 6y ago|0 comments
12.
The case of Kucoin, and moving your assets out of exchanges(blog.congruentlabs.co)
2 points by timothy-quinn 6y ago|0 comments
13.
Why 2FA isn't enough with Crypto Exchanges(blog.congruentlabs.co)
5 points by timothy-quinn 6y ago|1 comments
14.
Using your YubiKey to protect your MetaMask Accounts(blog.congruentlabs.co)
4 points by timothy-quinn 6y ago|0 comments
15.
Signata 1.0.0 – and why we've removed IdP Authentication(blog.congruentlabs.co)
4 points by timothy-quinn 6y ago|0 comments
16.
by timothy-quinn 6y ago
I think we all end up on our own journey of trying to find the note taking style that works best for us, and the variety of styles (git, onenote, evernote, pen & paper, notes app, etc.) has lent to a variety of applications being built
17.
by timothy-quinn 6y ago
Exactly - but the reactions I saw when he first released Pwned Passwords was "this is a malicious tool, don't give your password to anyone". Even if you're hitting the API from your own service, you need the entire passw
18.
by timothy-quinn 6y ago
I've always found HIBP in this funny conflicting situation - on hand you should never provide your email or password to a 3rd party service because it's probably malicious, but on the other hand in HIBP's case it's very
19.
by timothy-quinn 6y ago
The Aus Government has a good guide called the "Essential Eight" for reducing risk. It's a good starting point for businesses, and is pretty much universal advice, not just applicable to government departments: https:/&
20.
Essential Eight, Essentially(blog.congruentlabs.co)
3 points by timothy-quinn 6y ago|1 comments
21.
by timothy-quinn 6y ago
So far GA is answering two important questions for me - which marketing strategies are actually working (because it's hard to tell when you've got multiple going at once), and also making sure my marketing is actually hitting the
22.
by timothy-quinn 6y ago
Yeah that's why I added the "if" - But I have seen a lot of very small teams running AD (or Azure AD if they've chosen the Microsoft path), but they tend to just be paranoid about security or running in countries with po
23.
by timothy-quinn 6y ago
Oh yeah good point, I always forget about the OATH part of the YubiKeys - unfortunately it's like the OTP feature in that I haven't had enterprise customers asking me about it at all (they're all hyped about U2F), so I start
24.
by timothy-quinn 6y ago
Hi! I'm actually the product manager for the product mentioned in that article: https://enterprise.signata.net . Are you heavily SaaS based for the tools you use in your startup, or do you have some on-prem infrastructure? T
25.
by timothy-quinn 6y ago
It depends on the context really - I love the push-driven MFA products, but they specifically require you as a user to be carrying a phone with you at all times, and are usually considered "low" assurance of the user's identi
26.
by timothy-quinn 6y ago
Yeah Nitrokeys are probably the closest device, but cost even more https://www.nitrokey.com/ And usually it's twice what they charge, because you need a backup device to handle losing the first one. I'd like to
27.
by timothy-quinn 6y ago
Luckily I wrote down the steps I took. Based on this, but the original seems to be gone now: https://nicluo.com/projects/secure-your-mac-with-yubico-u2f-... brew install pam-u2f mkdir -p ~/.config/Yubic
28.
by timothy-quinn 6y ago
I've personally never seen it work that way - usually because RDP doesn't pass through direct USB devices, only their abstracted forms (e.g. smartcards don't get passed through, only the "Smart Card" device register
29.
by timothy-quinn 6y ago
Does anyone use YubiKeys on OSX for business use? I've tried integrating them on my personal mac before, but the U2F PAM experience was pretty clunky, and caused weird messages from services like Keychain that (I guess) couldn't d
30.
by timothy-quinn 6y ago
Probably a backup. It makes sense to have an offline backup in cleartext (for DR), as long as you have the appropriate storage and security controls in place to protect it.

More ›