xaduha

10 ms·

61.
by xaduha 4y ago
Very cool idea, but what I'd need way more often: Now what I want is something that will scan a pile of stocks and tell me how to put them together to have a perfect portfolio. https://www.tradingview.com/heatmap/s
62.
by xaduha 4y ago
Ah I've heard of those, but that seems like another "first world problem" similar to 3-D Secure not being widespread. That's why identity theft is such an issue in USA, just by having enough information you can make cust
63.
by xaduha 4y ago
> SMS is not secure and a SIM-swap away from someone being able to make purchases in your name. as in physically getting hold of a SIM card and putting it into another phone? That's what SIM PIN codes are supposed to protect against
64.
by xaduha 4y ago
First World problem, literally. I've read that swiping cards is still widespread and magnetic strip is mandatory and chips are optional, but I wonder whether people in USA still sign their cards. Paying online without a code from SMS o
65.
by xaduha 4y ago
I recently got SmartCard HSM (also available as Nitrokey HSM 1 and 2 I think), but didn't get around to setting it up yet. For personal use it does seem like an overkill, when FIDO2 security keys are much more convenient.
66.
by xaduha 4y ago
I wonder what you think of these https://en.wikipedia.org/wiki/Russian_floating_nuclear_power... https://en.wikipedia.org/wiki/Akademik_Lomonosov
67.
by xaduha 4y ago
I blame Naked Gun 2½ https://www.youtube.com/watch?v=oSJZjBC-Dd8
68.
by xaduha 4y ago
I don't know how do you imagine a typical 'SSH user' looks like, but no company is out there racing to disrupt that particular field. There won't be a security key provider that cares enough to follow WebAuthn spec, but
69.
by xaduha 4y ago
What I described there is a current, practical way to bypass subsequent presence checks in my particular security key (Google Titan NFC) which I tried out too. What you're talking about is that some hardware implementations might be la
70.
by xaduha 4y ago
For something like that to work an attacker would have to add into ~/.ssh/config (on each intermediate server) lines mentioned in another recent post ControlMaster auto ControlPath ~/.ssh/github
71.
by xaduha 4y ago
No it cannot, not until I touch my security key. I'm not a novice in these matters and I just tested it again. To connect to one server I have to touch my security key and then to connect to another one from it immediately afterwards I
72.
by xaduha 4y ago
If you have Yubikey, then this is fine https://xeiaso.net/blog/yubikey-ssh-key-storage . I have Google Titan NFC which is basically Feitian K9 NFC, so it doesn't support -O resident. Back in 2016 I was using https
73.
by xaduha 4y ago
Just tried this $ ssh whoami.filippo.io and it prints this You have SSH agent forwarding turned (universally?) on. That is a VERY BAD idea. For example, right now this server has access to your agent
74.
by xaduha 4y ago
My ~/.ssh/config has one line: ForwardAgent yes My public keys are in my dotfiles repo and my private keys were in hardware security keys/cards since 2016, unextractable. I don't see any reason to do what this post is su
75.
by xaduha 4y ago
I'm surprised no one mentioned https://insect.sh yet.
76.
by xaduha 4y ago
Handwave all you want, but the topic at hand is a possibility of securing devices against physical access attacks. And it's not only possible, it's pretty straightforward if you don't suffer from NIH syndrome. And as an examp
77.
by xaduha 4y ago
Using this table for reference and the fact that proper smartcards like banking cards and SIM cards are secure I'm pretty confident calling modern CA systems secure too. If some providers don't have one of those, then it's pr
78.
by xaduha 4y ago
> Everything else is just making it harder. If it's hard enough that only state actors can potentially do it, then what does it matter in real life that it's theoretically vulnerable?
79.
by xaduha 4y ago
Microsoft and Sony appear to have solved it for their gaming consoles. Satellite TV providers definitely solved it by now after learning from their mistakes. All in all there are plenty of devices in the world that are protected against phy
80.
by xaduha 4y ago
Here's a list of robotaxi companies https://en.wikipedia.org/wiki/Robotaxi#Testing_and_revenue_s... , some of them operational, Level 4. I would be very surprised of any of them use AI vision without Lidars. That&#
81.
by xaduha 4y ago
I watched it, you might have rose-tinted glasses on, it's not ready yet. Compare it to AutoX videos. And you can't expect others to follow this path, it's not like Tesla is going to make it available to others.
82.
by xaduha 4y ago
> you still need to figure out whether it is a trashcan or a child Why? First of all don't drive into anything that moves, period. Secondly, if you can avoid bumping into anything at all, do that.
83.
by xaduha 4y ago
Why not? Sure it's all complicated enough, but conceptually measuring distance with a laser is simple. Do that many, many times and you have a good enough picture of the surrounding area in a machine-readable 3d format, so you have a g
84.
by xaduha 4y ago
Lidar approach just has to be the winner in my opinion, simpler is better.
85.
by xaduha 4y ago
> Such a great reminder. Reminder of what? To me this reads like satire, even if it wasn't intended as such.
86.
by xaduha 4y ago
You don't need this for ecdsa keys, normal ssh agent works just fine as in `ssh -A`.
87.
by xaduha 4y ago
I suggest testing it yourself in any case, I don't think this article is correct in this. I did try it in the past with Google Titan and not a Yubikey and I could be wrong. EDIT: `-O resident` might be what is doing it though, I wasn&#
88.
by xaduha 4y ago
You're right and OP mentioned it at the start too. I guess your editor would show you what is expected there and that should be good enough for most cases. If it is some sort of a library though, then there should be a better way to do
89.
by xaduha 4y ago
It is the same thing, just needs a bit of imagination.
90.
by xaduha 4y ago
Read the whole comment, FlagID is there and function signature func IsEnabled(id FlagID) bool { would be satisfied just fine

More ›