gre345t34

8 ms·

1.
by gre345t34 2y ago
To be fair, the webauthn spec expressly forbids facilitating the extraction of credentials from the authenticator (though arguably even syncing between devices violates the spec).
2.
by gre345t34 2y ago
Ideally you should not be able to determine whether a username is valid without authenticating.
3.
by gre345t34 2y ago
If you got tricked into logging into goggle.com or something the FIDO2 auth would fail because a) the URL would not match the credential metadata and b) the resulting assertion, a signature over data which includes the URL, would not be val
4.
by gre345t34 2y ago
A FIDO2 credential can be used for passwordless authentication, so long as the authenticator performs user verification (e.g. requires a PIN). This counts as 2FA because it's something you have (the authenticator) plus something you kn
5.
by gre345t34 3y ago
The article assumes quite a bit of knowledge of FIDO2 and your confusion is understandable. > How/why? What's the connection to passkeys or HSMs? Passkeys are implemented on top of FIDO2 and specifically utilise the "resid
6.
by gre345t34 3y ago
Tell me about it. All of the terminology around FIDO is super confusing, and FIDO themselves make no effort to clarify or acknowledge the confusion. Everyone (including Yubico) uses the terminology incorrectly in a way that makes it super h
7.
by gre345t34 3y ago
CTAP1 is only used for talking to old U2F keys. Additionally, U2F/CTAP1 does not support resident keys anyway (IIRC).
8.
by gre345t34 3y ago
Primary issue with FIDO is not the specs themselves but the extremely confusing nomenclature that FIDO put zero effort into clarifying.
9.
by gre345t34 3y ago
It's like murder but scaled up.
10.
by gre345t34 3y ago
There's a certain amount of cosmic irony involved whenever someone calls LLMs 'stochastic parrots' or whatever.
11.
by gre345t34 4y ago
The context is that US is developing high altitude balloons for detecting hyper-sonic weapons. Developing a technology and actively using in another country's airspace are quite different things, so it's not really that surprising
12.
by gre345t34 4y ago
Yeah, kinda of disappointing for the author to disavow his own cautionary tale about AI, because obviously only meat can be conscious I guess.
13.
by gre345t34 4y ago
Can you tell us how to determine which tasks require "understanding" and which don't, so that we may make accurate predictions about what tasks LLM's will be capable of in the future?
14.
by gre345t34 4y ago
As far as I can tell, it's a library that implements CTAP2 (which it erroneously refers to as webauthn).
15.
by gre345t34 5y ago
Why should hackers be prosecuted for using systems as they're programmed?
16.
by gre345t34 6y ago
Because there are lenses in the headset that focus the two images at a set focal distant (between a couple of meters and infinity focus, depending on the headset). You need glasses for the same reason one would need glasses to see a flat im
17.
by gre345t34 6y ago
You are confusing optical focus (like a camera lens or the lens in your eye) with stereopsis - the mechanism by which your brain detects depth information through parallax. The VR headset shows each eye a slightly different image. Objects a
18.
by gre345t34 6y ago
This is inaccurate. Unlike IRL in which objects can appear at varying focal distances, requiring the eye muscles to constantly adjust the focal distance of the eye, the two images in a VR headset (one for each eye) remain at a constant foca