Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
xaduha
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
29 ms
·
301.
▲
by
xaduha
6y ago
I agree, it's not a skimmer.
302.
▲
by
xaduha
6y ago
Think of it as a temporary Visa card. It's not under their control.
303.
▲
by
xaduha
6y ago
In terms of system login stuff (at least on Windows and macOS) I think it would work exactly the same as any other supported 3rd party fingerprint sensor.
304.
▲
by
xaduha
6y ago
> What happens when you lose or brake your security key, is your PC locked forever Not sure about macOS, but on Windows it would most likely use Windows Hello, even though they didn't mention it once in that blogpost. It doesn'
305.
▲
by
xaduha
6y ago
With Yubico I always get a feeling that if they could breakaway from all this legacy smartcard stuff and lock everyone in, they would. But they can't yet, so they distanced themselves from it and were keeping it on the down-low ever
306.
▲
by
xaduha
6y ago
BTW if you decide to buy a contactless reader steer clear of acr122u, they pop up first in the search results and either fake or bad or both. Research before you buy, don't look for NFC, looks for contactless PC/SC https:/&#
307.
▲
by
xaduha
6y ago
If you have experience with contact cards, then it's all the same as far as end applications are concerned, it's abstracted away. > is gnupg aware of contactless readers and will it e.g. ask for your PIN without the card being
308.
▲
by
xaduha
6y ago
Well I wasn't linking the payment ring, but rather a smartcard in a ring formfactor. As for payments, you can go this daring route https://www.instructables.com/RFID-NFC-Tap-and-Go-Ring-for-C...
309.
▲
by
xaduha
6y ago
> it's unclear if NFC-only GPG cards work with desktop gnupg If you mean this applet https://developers.yubico.com/ykneo-openpgp/Releases then it would work just fine, you just need a proper contactless PC/
310.
▲
by
xaduha
6y ago
There are plenty of fingerprint readers on the market, doesn't really excite me because it just makes it 2-in-1. What does excite me? Smart rings like https://store.nfcring.com/products/omni
311.
▲
by
xaduha
6y ago
Sure and what can you use it for in the browser? SVG at most. XInclude? I don't think so. XHTML 2.0 was about much more than this.
312.
▲
by
xaduha
6y ago
This discussion is a decade late. The direction was set when HTML5 was chosen instead of XHTML 2.0 and I don't think any important group changed their mind since. Committee-made standards are impotent without popular implementations.
313.
▲
by
xaduha
6y ago
It's easy enough when things are on separate disks. Disk partitioning for dual-boot always was and always will be crap.
314.
▲
by
xaduha
6y ago
Well I hope that Spotify on Android does send original AAC to devices which support it too, but more general point is that you need support on both sides. Something has to decode that AAC on the receiving end, otherwise you'll get stan
315.
▲
by
xaduha
6y ago
I think that's a second recent discussion on Bluetooth here that doesn't mention aptX at all. For me that was a gamechanger, wouldn't really buy anything that doesn't support it. Unless there are some other similar t
316.
▲
by
xaduha
6y ago
Linux is nice, but as soon as new LTSC is out I will probably switch to it to use WSL2.
317.
▲
by
xaduha
6y ago
More people should use uwf (Universal Write Filter), especially if you're already sailing high seas for enterprise editions like LTSC.
318.
▲
by
xaduha
6y ago
> Using ENV to store secrets is bad practice because Dockerfiles are usually distributed with the application Nevermind Dockerfiles, env variables are preserved in stopped containers that are hanging around even when you use docker-machi
319.
▲
by
xaduha
6y ago
> echo "echo 3 > /proc/sys/vm/drop_caches" | sudo sh khm sudo sysctl vm.drop_caches=3
320.
▲
by
xaduha
6y ago
It's too easy to produce some abhorrent XML if you don't put much thought into it, straight from tables and objects. And then people are surprised that what they see is revolting, hard to work with and reason about.
321.
▲
by
xaduha
6y ago
That's not minimalist, this is minimalist sn() { rg -S -C 2 $1 /some/folder/with/snippets/as/files } $ sn git #searches for snippets containing `git`
322.
▲
by
xaduha
6y ago
Decide for yourself, PIV is an old and sprawling monstrosity and if you go from the specs, then no, it's not particularly suited for this relatively simple task. Proprietary PIV applet made by Yubico might be, but is that a good thing?
323.
▲
by
xaduha
6y ago
I never owned a yubikey and things probably changed over the years also since I last looked into it. But even so what you have there is a proprietary applet with lots of extensions https://developers.yubico.com/PIV/Intr
324.
▲
by
xaduha
6y ago
You're using yubikey agent or ykcs11 or yubico-piv-tool or somesuch nonsense most likely that actually provides PKCS#11. That is it wraps whatever PIV is supposed to do and gives you PKCS#11 interface. I'm talking about something
325.
▲
by
xaduha
6y ago
Because they were made for a different purpose, with extra hoops you need to jump through.
326.
▲
by
xaduha
6y ago
BTW both PIV and GPG in Yubikeys are just applets and not particularly suited for SSH use either. Proper applet for it is this one https://github.com/philipWendland/IsoApplet , if you can install it of course. Some get
327.
▲
by
xaduha
6y ago
Should've asked around, there were devices, standards and software for this kind of thing for a while e.g. https://github.com/philipWendland/IsoApplet
328.
▲
by
xaduha
6y ago
Is it really necessary though? I think it doesn't prune recently used volumes.
329.
▲
by
xaduha
6y ago
> This project does nothing additional to automate the actual installation of macOS inside the VM. This one does https://github.com/myspaghetti/macos-virtualbox Not fully, not perfectly, but does. It periodically as
330.
▲
by
xaduha
6y ago
> The UX of this solution is poor Not surprising if you ask me, have you installed an applet for it? Do latest Yubikey even allow installing applets? Why are you using PIV for this? I was using https://github.com/philipWe
More ›