xaduha

33 ms·

331.
by xaduha 7y ago
Apparently K9 Dev version is basically like eJavaToken, without applets installed, so no U2F, only CCID. Unless you specifically want that don't order.
332.
by xaduha 7y ago
I was recently looking for one and I will check it out, but I think I'll probably just use some git folder with snippets and a ripgrep alias for searching, I don't need much.
333.
by xaduha 7y ago
There are readers the size of a thumb drive, cards themselves are the standard credit card size or even SIM card size if not contactless. It's not the real issue here, there are a few more important ones such as lack of desktop browser
334.
by xaduha 7y ago
Feitian advertises one here https://www.ftsafe.com/Products/FIDO/NFC and they say you can request a dev version so you can install your own applets, but I can't vouch for it yet personally.
335.
by xaduha 7y ago
This thing seems fishy to me. If you want something that is mostly under your control to which you can install open source stuff into then buy some smart cards and card readers e.g. from https://www.javacardsdk.com
336.
by xaduha 7y ago
Regarding your edit the problem here is that you assume that U2F/FIDO is some sort of a new, separate thing when in fact it can be just one 'program' or applet of your device which can support others, that are more suitable f
337.
by xaduha 7y ago
Not sending PIN over the network is the most important distinction between a proper PIN and a password. https://docs.microsoft.com/en-us/windows/security/identity-p...
338.
by xaduha 7y ago
Yet nobody uses 4 digit passwords. https://en.wikipedia.org/wiki/Personal_identification_number
339.
by xaduha 7y ago
Smartcard logins were a thing for a long time, especially in military. PINs are the norm, not the exception.
340.
by xaduha 7y ago
PINs and passwords are not the same though, PINs are for devices and usually not intended to be sent anywhere else, unlike passwords. PINs are also protected from bruteforce, that's why they are usually just 4 numbers.
341.
by xaduha 7y ago
> Linux system doesn't need to arrange to read a PIN from the user Is that a problem now?
342.
by xaduha 7y ago
It's great, but has no Android support atm. Gotta stick with Wireguard for now.
343.
by xaduha 7y ago
Can't edit anymore, so adding here. Between 'not vulnerable' and 'max speed' there are a few different intermediate states, probably was in one of those. And I have to admit that for All Green in spectre-meltdown-ch
344.
by xaduha 7y ago
What about qemu with virtio networking and drives?
345.
by xaduha 7y ago
When running Overwatch under VFIO according to Task Manager and i7z tool on the host it loads cores pretty evenly for me. Can't keep 150 FPS at all times during a replay for instance, gonna disable mitigations and see if anything chang
346.
by xaduha 7y ago
If you want to try to do this for games, then at least measure the impact with some benchmarks in games that are CPU bound. Maybe it's not worth it.
347.
by xaduha 7y ago
I'm not an expert, but my understanding was that Linux updates microcode by itself, has nothing to do with BIOS. EDIT: depends on the distro
348.
by xaduha 7y ago
There are a lot of PC/SC compatible card readers e.g. most of these https://ccid.apdu.fr/ccid/supported.html https://ccid.apdu.fr/ccid/shouldwork.html
349.
by xaduha 7y ago
LTSC
350.
by xaduha 7y ago
I have a contactless card reader and contactless smart card that has this installed https://github.com/tsenger/CCU2F It works in mobile Chrome just fine with built in NFC, but it doesn't work in Windows and Linux
351.
by xaduha 7y ago
Bitlocker supports smartcards just fine (gotta set SelfSignedCertificates and CertificateOID though). I don't know much about encryption as a whole, but I have some inkling about smartcards and this makes me suspect this whole article
352.
by xaduha 7y ago
> More concretely, that means if the person sitting next to me at work uses a smartcard granting them access to private documents, and they leave it on their desk during lunch, I can clone the smartcard and give myself access to all thei
353.
by xaduha 7y ago
I'm using this with a contactless smartcard, works just fine on Android https://github.com/tsenger/CCU2F
354.
by xaduha 7y ago
Stock-ish Android that gets updates is good enough for me. I'm looking forward to wider support of U2F over NFC in general though, I don't keep data on the phone itself. You can buy a contactless smartcard for $15 each and install
355.
by xaduha 7y ago
Well internally it shows as an extension, you can check yourself. Didn't use to, but does now.
356.
by xaduha 7y ago
All I know is that I'm staying on LTSB for as long as possible.
357.
by xaduha 7y ago
Biggest changes will be geopolitical driven by humanitarian catastrophes. It's very much in the interest of the Western World not to allow it to happen.
358.
by xaduha 7y ago
> Purists will agree with you. Pragmatists perhaps not so much. Golang is one of the most pragmatic languages there is.
359.
by xaduha 7y ago
Between elegant and 'industry-friendly' languages latter always win. Often shortcomings of the language are accounted for in tools around it.
360.
by xaduha 7y ago
NixOS is one of the best distros there is and it uses systemd. Do I interact much with systemd myself? No, I don't even though I don't mind.

More ›