zmxz

15 ms·

121.
by zmxz 4y ago
Not enough info to even guess what might be wrong, but I'd assume it's defective and I'd try with another key as well. I wish you good luck with the next Yubkey you get! :) Btw. this is the first time I've read on a publ
122.
by zmxz 4y ago
Which model do you own and how does the loss manifest? The single-tap and long-tap don't produce expected output? Can you share more info on it? I own many Yubikeys (due to research I've been doing in 2017.) and I had many Yubikey
123.
by zmxz 4y ago
> What's the use case for sharing passwords? There's plenty. > I sure hope not. Why? I'm not suggesting to have an extension that has access to your file system. Bitwarden has browser extension that communicates to Bitw
124.
by zmxz 4y ago
What happens when there's more than you who uses the Keepass file and how do you store new passwords to the file when you create new accounts on the web (for various services)? What's the usage flow? Is there browser extension tha
125.
by zmxz 4y ago
Amazing, you helped the person in question with a single sentence. I can feel their stress disappearing. Mere fact that we're at the point where we have transpiler upon transpiler upon transpiler, where "wRiTtEn iN rUsT" is u
126.
by zmxz 4y ago
> This isn't gaming. This is a programming library. And humans can be gamers and programmers. Welcome to real life, tutorial is now over. > This is not a "gaming context." When a word is placed in quotes, convention is
127.
by zmxz 4y ago
But it's not an insult towards actual farmers, it's an insult towards an impostor that pretends they're doing valuable work while all they do is the opposite and they merely throw time at a problem, creating illusion of val
128.
by zmxz 4y ago
But he didn't insult crop farmers, he placed the word in quotes. A "farmer" (note the double quotes) is a gaming/internet culture term that denotes someone who does repetitive, boring tasks in order to accumulate some
129.
by zmxz 4y ago
In gaming culture, a farmer is someone who repeats the same actions for extended periods of time. It's not an insult in gaming context, and "farming" in the context of our craft does not relate to actual farmers. It sounds li
130.
by zmxz 4y ago
Why is the author asshole? You don't insult farmers but you won't stoop before insulting the author of microwebsockets. At what point does one assume moral high ground with 100% certainty? It's as if all this hate comes from
131.
by zmxz 4y ago
> In the 1970s, programming was an elite's task. Today programming is done by uneducated "farmers" and as a result, the care for smart algorithms, memory usage, CPU-time usage and the like has dwindled in comparison. What&
132.
by zmxz 4y ago
> I always saw tech as the field where a disproportionally large amount of people truly love what they do That used to be true, before smartphones arrived and before DevOps became a thing. Now it is what it is - a lot of (mediocre or wor
133.
by zmxz 4y ago
Agreed. When sharing knowledge was to actually inform someone out of pure altruism. When gaming was about gaming and not money/sponsors. When social communities (forums) actually gathered people out of pure desire to share common inter
134.
by zmxz 4y ago
So, there's a library called libsodium that deals with cryptography and your comment, based on literal nothing, is that PHP is somehow "worse" than other languages, yet PHP and other languages use libsodium for cryptographica
135.
by zmxz 4y ago
> What about all the languages that can simply use libsodium directly Nothing. It's great they do that. I made a comment that refuted a snarky remark that had no basis, I did not compare languages nor post claims about language&#x27
136.
by zmxz 4y ago
When you read the posts and when you don't rely on titles , you can see the point that the author argues. 2FA does suck, it's not a pleasant experience but it is necessary. If something sucks, it does not mean that you don&#x27
137.
by zmxz 4y ago
The titles are misleading (purposely, because it attracts interest), however - you should read what's written before judging. From what you've written, I'd safely bet your attention span is really low and that you haven'
138.
by zmxz 4y ago
If your snarky comment is aimed at PHP, I'm afraid I have bad news for you. > PHP becomes the first programming language with modern cryptography in its standard library thanks to the bundled libsodium https://www.jetbrai
139.
by zmxz 4y ago
I'm sorry that we ended up discussing this because all you did was invent situations and argued with people who didn't even state any of what you managed to read. No one is telling you not to deal with CORS your way. Fact of the m
140.
by zmxz 4y ago
Why put anything in front of Firebase hosting? Why not use Firebase hosting as the front? This confirms my initial comment - people making up reasons. The solution is always the same, it's always as easy and there's never the need
141.
by zmxz 4y ago
You're jumping to conclusion too fast. You already have the web server and you can already achieve no-CORS without "introducing" anything new. I'm not trying to convince you, but since you're someone who works in th
142.
by zmxz 4y ago
They're not, but you're blatantly refusing to read what's being written. Public CDN should never be trusted. If you use a CDN in the first place and have strict security requirements, then you create your own private CDN. And
143.
by zmxz 4y ago
This kind of comment falls under what I posted originally - people making up reasons why they can't go with proxy solution.
144.
by zmxz 4y ago
There's 1 way to solve this, and it's to have the same domain that the end client (browser, app) uses. It means you'd create 1 domain that's exposed to client and on the web server level you perform routing (proxying) to
145.
by zmxz 4y ago
Serving said JS on CDN implies that the JS performs xhr/fetch, which means I have control over said CDN Given the fact I have control over domain(s), I'd have http://domain.tld/api for API and serve static js from
146.
by zmxz 4y ago
Forward the correct data, then it makes no difference to WAF if it's you or user requesting. That's why we have various controls with proxies, such as including the original requester's IP etc. It's irrelevant who actu
147.
by zmxz 4y ago
Can you provide an example, just so we can be on the same page? You do an XmlHttpRequest or fetch() to a static asset and it's a non-trivial request to CDN, I just wonder how it looks like and why it exists in the first place.
148.
by zmxz 4y ago
A web server (nginx) that can proxy your request to the other domain, but your browser sends everything to one domain, thus avoiding CORS. Example: you have http://ui.localhost and you have http://api.localhost UI sp
149.
by zmxz 4y ago
This is the only valid solution and the easiest one to implement. However, for some reason unknown to me - younger devs and various organizations simply refuse to go down this route and make up reasons why it doesn't work for them, opt
150.
by zmxz 4y ago
Which platform would you suggest to use for this benchmark?

More ›