Nordic nod of approval
I think it’s a little different. The restaurant fee isn’t a fee for something “extra”, it’s just a blanket extra charge on everything. It’d be like the airline sold you a ticket for $500, but as you step off the plane…
Scorched Earth was also my first hacking target. Found out that your cash balance and weapons inventory was all stored in a mysterious .ini file and you could just edit it.
It's more like workers on a large oil tanker using bicycles to move around it, rather than trying to use another oil tanker.
> why they're attributed to AI? I don’t think they mean scrapers necessarily driven by LLMs, but scrapers collecting data to train LLMs.
Back in college (~2008) we implemented this with a 7 foot tall back-projected screen and a couple of Wii remotes after seeing Johnny Lee’s video. The nice thing with that screen was that you could stand so close to it…
It is not based on TB but it is heavily informed by those efforts. See here: https://github.com/w3c/webappsec-dbsc#what-makes-device-boun... However, DBSC as an API and protocol is similarly agnostic about key storage.…
Services can certainly make this safer by providing means to get more restricted credentials, so that users can deputize semi-trusted delegates, such as agents vulnerable to injection. The important point being made in…
It’s the same thing: https://fidoalliance.org/passkeys/
This is a very good point, and one the DBSC team thinks about a lot. In the short term it's about economics: Infostealer malware today scales really well because it can a) exfiltrate cookies quickly and clean it self…
There was a pretty good video on this a couple of years ago: https://www.youtube.com/watch?v=QFv3QPNU6hw
Garfield is certainly (meant to be) real, but I've never seen a strip that confirms that Jon can actually hear Garfield's thoughts. I think that's why Garfield minus Garfield works so well.
It’s not induction. It’s just the contrapositive of “if you can solve the simpler problem then you can solve the harder problem”
You used to be required to adopt an Icelandic forename - not surname. You still kept your original name (if you wanted) and it was up to you which one you used on practice. But as sibling comment says, that’s been…
> They are (or were) refusing to provide any indication to those other companies that these are not, in fact, the same people That is not quite true, the sub field will be different.
“They” in this case included me and this was a deliberate fix for poor UX many years ago. We definitely thought about it and we used to blink only the key that had a credential from the allow list, because like you we…
Chrome on desktop did: https://developer.chrome.com/docs/identity/webauthn-signal-a...
Stained glass won’t (I think) shift any frequencies. It will attenuate different frequencies differently, but it won’t make up new ones. So when the signal frequency changes, you’ll still see that change, but the light…
Others have answered correctly (it was an arbitrary choice), but fwiw I always found it helpful to think of current as the direction of the “holes” where electrons can be. Like bubbles rising in water, the holes…
He's also the one running for president. https://grapevine.is/news/2024/04/03/comedian-and-former-rey...
In one of our iterations, we did indeed have a mandatory rule that each set of caveats added by a holder was terminated by a “sign off” caveat. But in the end we concluded that if that mattered in the actual…
Macaroon is just the English word for the French word macaron. ducks for cover
> None of these changes are necessarily authenticated - I don't know that it specifically was the user agent that shared the token with the service or added the read-only restriction, at least with the core tech.…
Not really, no, if you refer to them being used for chaining. In FIDO it’s just used as a plain MAC in the expected places.
Very much looking forward to the blog post! At G we’ve relied on some existing key replication APIs and the caveats have just been the simplest possible and rigid protobufs for each application. (And thanks! I’m still…
Nordic nod of approval
I think it’s a little different. The restaurant fee isn’t a fee for something “extra”, it’s just a blanket extra charge on everything. It’d be like the airline sold you a ticket for $500, but as you step off the plane…
Scorched Earth was also my first hacking target. Found out that your cash balance and weapons inventory was all stored in a mysterious .ini file and you could just edit it.
It's more like workers on a large oil tanker using bicycles to move around it, rather than trying to use another oil tanker.
> why they're attributed to AI? I don’t think they mean scrapers necessarily driven by LLMs, but scrapers collecting data to train LLMs.
Back in college (~2008) we implemented this with a 7 foot tall back-projected screen and a couple of Wii remotes after seeing Johnny Lee’s video. The nice thing with that screen was that you could stand so close to it…
It is not based on TB but it is heavily informed by those efforts. See here: https://github.com/w3c/webappsec-dbsc#what-makes-device-boun... However, DBSC as an API and protocol is similarly agnostic about key storage.…
Services can certainly make this safer by providing means to get more restricted credentials, so that users can deputize semi-trusted delegates, such as agents vulnerable to injection. The important point being made in…
It’s the same thing: https://fidoalliance.org/passkeys/
This is a very good point, and one the DBSC team thinks about a lot. In the short term it's about economics: Infostealer malware today scales really well because it can a) exfiltrate cookies quickly and clean it self…
There was a pretty good video on this a couple of years ago: https://www.youtube.com/watch?v=QFv3QPNU6hw
Garfield is certainly (meant to be) real, but I've never seen a strip that confirms that Jon can actually hear Garfield's thoughts. I think that's why Garfield minus Garfield works so well.
It’s not induction. It’s just the contrapositive of “if you can solve the simpler problem then you can solve the harder problem”
You used to be required to adopt an Icelandic forename - not surname. You still kept your original name (if you wanted) and it was up to you which one you used on practice. But as sibling comment says, that’s been…
> They are (or were) refusing to provide any indication to those other companies that these are not, in fact, the same people That is not quite true, the sub field will be different.
“They” in this case included me and this was a deliberate fix for poor UX many years ago. We definitely thought about it and we used to blink only the key that had a credential from the allow list, because like you we…
Chrome on desktop did: https://developer.chrome.com/docs/identity/webauthn-signal-a...
Stained glass won’t (I think) shift any frequencies. It will attenuate different frequencies differently, but it won’t make up new ones. So when the signal frequency changes, you’ll still see that change, but the light…
Others have answered correctly (it was an arbitrary choice), but fwiw I always found it helpful to think of current as the direction of the “holes” where electrons can be. Like bubbles rising in water, the holes…
He's also the one running for president. https://grapevine.is/news/2024/04/03/comedian-and-former-rey...
In one of our iterations, we did indeed have a mandatory rule that each set of caveats added by a holder was terminated by a “sign off” caveat. But in the end we concluded that if that mattered in the actual…
Macaroon is just the English word for the French word macaron. ducks for cover
> None of these changes are necessarily authenticated - I don't know that it specifically was the user agent that shared the token with the service or added the read-only restriction, at least with the core tech.…
Not really, no, if you refer to them being used for chaining. In FIDO it’s just used as a plain MAC in the expected places.
Very much looking forward to the blog post! At G we’ve relied on some existing key replication APIs and the caveats have just been the simplest possible and rigid protobufs for each application. (And thanks! I’m still…