chowell

5 ms·

1.
by chowell 2mo ago
Definitely interesting to read about. It seems like it has some similarities to the approach Fly.io blogged about here: https://fly.io/blog/carving-the-scheduler-out-of-our-orchest...
2.
by chowell 7y ago
You've totally lost me, and it's not because I misunderstand FIDO. The private key you refer to must be kept secret or the credential is compromised. Yes, this is undoubtedly better than passwords, because the system automatically
3.
by chowell 7y ago
This line of reasoning doesn't hold up at all. The best practice advice 'avoid security through obscurity' has nothing to do with what you're talking about. Also, FIDO absolutely relies on secrets: that's what a sec
4.
by chowell 7y ago
AWS only allows one U2F token to be registered at a time.
5.
by chowell 7y ago
I was super surprised to learn AWS will only allow you to register a single FIDO token - the inherent lockout risk pushed me back to using OTP with the seed stored in multiple Yubikeys.
6.
by chowell 7y ago
No, the whole point of U2F/FIDO is that phishing sites can't extract a usable credential from the key because everything is tied to the origin requesting the authentication.
7.
by chowell 8y ago
Presumably so that the backup is offsite.
8.
by chowell 8y ago
Do you drop tracking cookies or scripts that fingerprint the users visiting your site? No? Well by resisting the push to TLS, you're allowing ISPs and who knows who else to inject that content into the sessions of your users.
9.
by chowell 9y ago
If your concern is just with government expenditures, sure, but you can also make the argument that prioritising rural areas could give them a head start on the growth of digital services. Taking Australia from being a market where cities h
10.
by chowell 9y ago
He expands in his Medium post from last year, here: https://medium.com/@thegrugq/the-great-cyber-game-commentary...
11.
by chowell 10y ago
Someone correct me if I'm wrong, but isn't the explicit purpose of intelligence agencies to gather intelligence about foreign countries (allied or otherwise) to further the national interest? I don't really see how this is a