mimming
Re:Global, U.S. Growth in Smartphone Growth Starts to Decline
on Saturday December 08, 2018 @12:49PM (#18636426)
I made the switch to a cellular tablet (9.7" iPad Pro) a couple years ago and it's been great.
It reduces the urge to whip out my mobile device at every moment of mild boredom, and collaborative apps like ported board games shine.
The one downside is that I look pretty silly when taking photos.
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
on Thursday November 15, 2018 @06:33AM (#18458474)
Generally yes, but the admin has the power to either enforce it (for some or all users) or disable it domain wide.
If you were to create a new GSuite domain today, it'd be allowed for all users.
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
on Thursday November 15, 2018 @06:30AM (#18458461)
Yes google does.
The spec strongly encourages providers to allow multiple keys, and allow you to nickname them.
As far as I know everyone allows as many keys as you like except Vanguard and Amazon AWS (which both also only accept Yubico keys)
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
on Thursday November 15, 2018 @06:29AM (#18458457)
You use a less convenient backup authentication.
The specifics depend on the use case, but even if you fall back to something less secure like an email and TOTP, you still come out ahead overall because most authentications are done by U2F.
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
on Thursday November 15, 2018 @06:26AM (#18458441)
Essentially it borrows the protections from TLS. Here's a link to the relevant part of the spec: https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fid...
(Sorry if this comes across as RTFM, but I figured the source is better than my attempt at explaining)
Re:AWS now supports U2F/Yubikeys
on Wednesday September 26, 2018 @01:28PM (#18078253)
Aw, that's a bummer. First Vanguard and now AWS support only Yubikey brand U2F devices. I wonder why that's happening?
Hopefully this practice remains limited. I really don't want haul a bag of different security keys around with me to access all of my services.
Re:AWS now supports U2F/Yubikeys
on Tuesday September 25, 2018 @08:15PM (#18071623)
They mention Yubikey a lot by name in the post. Has anyone tried a U2F device from a different manufacturer?
Re:Google Unveils Titan Security Key, a Yubico-Like Phishing Resistant...
on Wednesday July 25, 2018 @02:59PM (#17611846)
It’s not as big of a deal as you might expect because:
- The spec requires providers to allow independent addition / removal of multiple keys per account, so it’s easy to manage backup U2F keys.
- Providers can use any backup authentication method they want. This includes SMS codes, TOTP / HOTP apps, email resets, or maybe VCing in to tech support.
And even if the backup method is less awesome (e.g. sms codes) it still reduces your risk because because you use it less often.
[edit for formatting]
Re:Big Bang telescope finale marks end of an era in cosmology
on Tuesday July 24, 2018 @10:07AM (#17601121)
That’s starting to be the case. Check out https://projectpanoptes.org It’s network of ~$5000 exoplanet robotic survey telescopes. There’s also https://skynet.unc.edu/ which is aimed at larger scopes.
Re:Google: Security Keys Neutralized Employee Phishing
on Monday July 23, 2018 @01:25PM (#17594228)
The protocol specifics 3 transport options with this in mind: usb, nfc, and Bluetooth.
As others mention, nfc works great for android. Bluetooth is your only option for iOS, and it’s clunky because you have to deal with pairing.
Re:Google: Security Keys Neutralized Employee Phishing
on Monday July 23, 2018 @01:21PM (#17594194)
The U2F-Zero is about $9, and the cheapest U2F device I know of. They work well, but aren’t as durable as other options.
Re:Repl.it 1.0: IDE that Grows from Playgrounds to Fullstack Apps
on Tuesday March 13, 2018 @04:11PM (#16579327)
The teacher you're thinking of from last year is me :)
Thanks a lot for the great classroom product, and your support. It made my work a lot easier.
Re:Ask HN: What did you work on in 2017?
on Sunday December 31, 2017 @01:57PM (#16042039)
I started streaming coding on Twitch - https://twitch.tv/mimmingcodes
It’s rekindled my excitement of using the Internet to share knowledge.
Re:Ask HN: Projects that don't make you money but you're doing it out ...
on Thursday August 10, 2017 @09:19PM (#14985902)
http://dinopacks.com
I fill out those 'other comments' on order forms with a request for a dinosaur drawing.
Re:Windows XP at Defcon: Preparation
on Monday July 24, 2017 @03:10PM (#14841648)
Thanks! Please do say hi in person if you see me :)
Windows XP at Defcon: Preparation
Personal Information Spring Cleaning: Connected Apps and Sessions
Personal Information Spring Cleaning: Auth and Passwords
Re:Google Glass is getting a second life in the manufacturing industry
on Saturday March 18, 2017 @10:11PM (#13904769)
This is the best option I've seen: https://www.vufine.com
Re:Bay Area Bike Share is one of the least-used systems in US, costs $...
on Saturday March 18, 2017 @01:22PM (#13902347)
Also, as I sadly discovered, beyond a 2 second LED blip, there's no way to verify a successful bike dock. And a botched docking could cost you $1200.
Migrating CloudBleed impacted static websites to Firebase Hosting
Moving around the filesystem in vim
Re:Ask HN: What have you achieved in 2016?
on Saturday December 17, 2016 @12:40AM (#13199446)
I wanted to get better at speaking and lecturing, so presented about 80 times.
I convinced a few people to draw me dinosaurs.
Re:Ask HN: What “missing” technical solution(s) do you wish existed?
on Friday December 02, 2016 @10:58AM (#13089639)
Kind of like the rememberance agents the early wearable computing people used? http://alumni.media.mit.edu/~rhodes/Papers/wear-ra.html
Re:Ask HN: What “missing” technical solution(s) do you wish existed?
on Friday December 02, 2016 @10:56AM (#13089611)
I started to take a swing at the comments part a couple years ago with firebase: https://github.com/mimming/firebase-jekyll-comments
Re:Ask HN: Have you ever thought of leaving programming for something ...
on Tuesday November 08, 2016 @12:10AM (#12897840)
After years of software, I discovered that my favorite part of the job was teaching stuff to my peers.
I started by dabbling in teaching:
- Mentored some high school robotics teams in the evenings - Taught night school / weekend classes as adjunct faculty at local universities - Shifted my day job from developer to developer advocate
And then a few months ago I took the plunge... sort of. I went on sabbatical for a semester to teach CS 101 full time at a small university across the country.
It's been a great experience, but it made me realize how much I miss programming. I really miss the intellectual growth that I get from working with professional software developers. I suspect I'll resolve the conflict by going part time in my day job, and picking up more classes as an adjunct.
Re:How Diane Greene Transformed Google's Cloud
on Monday June 27, 2016 @03:43PM (#11988892)
Thanks for the writeup! I'll poke the appropriate teams. Sorry about the paper cuts -_-
Re:How Diane Greene Transformed Google's Cloud
on Monday June 20, 2016 @03:10AM (#11936551)
Sorry to hear things are more difficult. I'd love to hear specifics, if you're interested in sharing. I'd love to try to get them fixed :)
And yeah, I'm a developer advocate on GCP
Re:Give yourself permission to have work-life balance
on Thursday April 14, 2016 @04:00PM (#11499873)
It looks like time spent doing things that my employer wouldn't pay me to do. Over the course of my life, it's changed.
Sometimes it looks pretty similar to my day job, but to the benefit of a different organization, like when I mentored a FIRST robotics team.
Recently it's looked very different. I balance work with sports so that I can keep my body working well enough to enjoy a longer career :)