xori

7 ms·

1.
by xori 7mo ago
~~Written by the same people?~~ EDIT: ha, confused with https://wiki.xxiivv.com/site/uxn.html
2.
by xori 10mo ago
The real question is can Windows defender scan these drives?
3.
by xori 1y ago
I've been wanting to do this for ages. Originally I wanted to do this at the home router level, but that quickly got shut down when I got a test net up and running and my friends could control the Chromecasts in my house. For us a &quo
4.
by xori 1y ago
"How do you get corporate secrets out of a software engineer? Sit them next to another engineer on a plane."
5.
by xori 2y ago
Well they aren't in Canada for me yet, but that's probably because we aren't the public that needs to know.
6.
by xori 2y ago
"Show me what you got"
7.
by xori 2y ago
I understand, but things like https://github.com/GoogleChromeLabs/comlink enable it. Similar to how iFrames don't have access to their parent page you need a facilitator. My question is why not use a js facilitato
8.
by xori 2y ago
I see it now, I don't know how I missed it.
9.
by xori 2y ago
Why reach for iFrames over other technology like WebWorkers?
10.
by xori 2y ago
I'm confident then that you can skip the base64 encoded header and just have the server use the jwt passed in the bearer token and the new signature you propose. (As the base64 encoded version can be reconstructed from the JWT itself)
11.
by xori 2y ago
When you `.get` a credential you can provide a challenge that it signs which you can make the JWT. With an added bonus that this passkey can exist on your phone or password manager which you can use to authenticate on a different device whi
12.
by xori 2y ago
Yeah that does it for new keys generated, any old keys in IDB obviously still are exposed.
13.
by xori 2y ago
Rather than generating key data on the client in the open, and storing it in IDB, I would recommend the Credential Management API[0]. Hand off the responsibility to proper generation and storage to the user agent. Then do your signing of th
14.
by xori 2y ago
so I don't fully understand what you're preventing const db = await openDatabase(); const keyPair = await getKeyPair(db); await crypto.subtle.exportKey("jwk", keyPair.privateKey) exports the private key
15.
by xori 2y ago
Not much here explicitly in the source code dump. A little insight into their worker node infra but no "secret sauce" imo.
16.
by xori 2y ago
Hyperswarm has been my go-to for stuff like this, but you bring up a good point that I don't think it's encrypted. https://github.com/holepunchto/hyperswarm
17.
by xori 4y ago
I don't know if 5 miles is long enough for the people who actually need it, but if I was a postal worker, these would be pretty sweet. And 1400 USD is cheaper than some car insurance here in Canada for young males.
18.
by xori 5y ago
JPGs are not security, and moving JPGs can be fabricated very easily. Some v-tuber software with a deepfake GAN strapped to it I feel like would fool 1-on-1 meetings too. I got my weekend project.
19.
by xori 5y ago
> we can't decrypt your data. But I thought the point of the cages, is that _do_ decrypt the data. And any government mandated backdoors would then go into that process. You're not doing any homomorphic encryption here. I guess
20.
by xori 5y ago
It's actually built into vanilla android https://support.google.com/googleplay/answer/9283534?hl=en
21.
by xori 5y ago
They've updated their list with a few new ones. https://www.sjc.edu/academic-programs/undergraduate/great-bo...
22.
by xori 6y ago
I agree, I thought the same thing when I hit that section. "What's wrong with that?"
23.
by xori 6y ago
Well that was the most compelling trailer I've ever experienced for a SQL reference book. Well done.
24.
by xori 6y ago
I think they're still working on that https://hyax.com/pricing
25.
by xori 6y ago
I love it, I'm making cookies tonight. Some humble suggestions. - might be best to include the C as units for temp - somehow allow scaling recipe to whatever my eggs actually weigh, (I know I can estimate manually bumping the output up
26.
by xori 6y ago
For some reason the text fades in, then disappears. You seem to have a js error.
27.
by xori 6y ago
Unfortunately the actually git "push"ing of code is slower. I'm a paying sr.ht member and that's the one thing I wish was faster.
28.
by xori 6y ago
https://en.wikipedia.org/wiki/Halftone They used to generate this by holding a "screen" up to create the grid.
29.
by xori 7y ago
> In a case where fault must be determined between an autonomous vehicle and a human driver, human judges / juries are going to overwhemlingly side with the human. I think you're right, but _because_ there is sensor data to bac
30.
by xori 7y ago
I enjoy how your DMCA link is just for show.

More ›