To be fair, the webauthn spec expressly forbids facilitating the extraction of credentials from the authenticator (though arguably even syncing between devices violates the spec).
Ideally you should not be able to determine whether a username is valid without authenticating.
If you got tricked into logging into goggle.com or something the FIDO2 auth would fail because a) the URL would not match the credential metadata and b) the resulting assertion, a signature over data which includes the…
A FIDO2 credential can be used for passwordless authentication, so long as the authenticator performs user verification (e.g. requires a PIN). This counts as 2FA because it's something you have (the authenticator) plus…
The article assumes quite a bit of knowledge of FIDO2 and your confusion is understandable. > How/why? What's the connection to passkeys or HSMs? Passkeys are implemented on top of FIDO2 and specifically utilise the…
Tell me about it. All of the terminology around FIDO is super confusing, and FIDO themselves make no effort to clarify or acknowledge the confusion. Everyone (including Yubico) uses the terminology incorrectly in a way…
CTAP1 is only used for talking to old U2F keys. Additionally, U2F/CTAP1 does not support resident keys anyway (IIRC).
Primary issue with FIDO is not the specs themselves but the extremely confusing nomenclature that FIDO put zero effort into clarifying.
There's a certain amount of cosmic irony involved whenever someone calls LLMs 'stochastic parrots' or whatever.
The context is that US is developing high altitude balloons for detecting hyper-sonic weapons. Developing a technology and actively using in another country's airspace are quite different things, so it's not really that…
Yeah, kinda of disappointing for the author to disavow his own cautionary tale about AI, because obviously only meat can be conscious I guess.
Can you tell us how to determine which tasks require "understanding" and which don't, so that we may make accurate predictions about what tasks LLM's will be capable of in the future?
As far as I can tell, it's a library that implements CTAP2 (which it erroneously refers to as webauthn).
Because there are lenses in the headset that focus the two images at a set focal distant (between a couple of meters and infinity focus, depending on the headset). You need glasses for the same reason one would need…
You are confusing optical focus (like a camera lens or the lens in your eye) with stereopsis - the mechanism by which your brain detects depth information through parallax. The VR headset shows each eye a slightly…
This is inaccurate. Unlike IRL in which objects can appear at varying focal distances, requiring the eye muscles to constantly adjust the focal distance of the eye, the two images in a VR headset (one for each eye)…
To be fair, the webauthn spec expressly forbids facilitating the extraction of credentials from the authenticator (though arguably even syncing between devices violates the spec).
Ideally you should not be able to determine whether a username is valid without authenticating.
If you got tricked into logging into goggle.com or something the FIDO2 auth would fail because a) the URL would not match the credential metadata and b) the resulting assertion, a signature over data which includes the…
A FIDO2 credential can be used for passwordless authentication, so long as the authenticator performs user verification (e.g. requires a PIN). This counts as 2FA because it's something you have (the authenticator) plus…
The article assumes quite a bit of knowledge of FIDO2 and your confusion is understandable. > How/why? What's the connection to passkeys or HSMs? Passkeys are implemented on top of FIDO2 and specifically utilise the…
Tell me about it. All of the terminology around FIDO is super confusing, and FIDO themselves make no effort to clarify or acknowledge the confusion. Everyone (including Yubico) uses the terminology incorrectly in a way…
CTAP1 is only used for talking to old U2F keys. Additionally, U2F/CTAP1 does not support resident keys anyway (IIRC).
Primary issue with FIDO is not the specs themselves but the extremely confusing nomenclature that FIDO put zero effort into clarifying.
There's a certain amount of cosmic irony involved whenever someone calls LLMs 'stochastic parrots' or whatever.
The context is that US is developing high altitude balloons for detecting hyper-sonic weapons. Developing a technology and actively using in another country's airspace are quite different things, so it's not really that…
Yeah, kinda of disappointing for the author to disavow his own cautionary tale about AI, because obviously only meat can be conscious I guess.
Can you tell us how to determine which tasks require "understanding" and which don't, so that we may make accurate predictions about what tasks LLM's will be capable of in the future?
As far as I can tell, it's a library that implements CTAP2 (which it erroneously refers to as webauthn).
Because there are lenses in the headset that focus the two images at a set focal distant (between a couple of meters and infinity focus, depending on the headset). You need glasses for the same reason one would need…
You are confusing optical focus (like a camera lens or the lens in your eye) with stereopsis - the mechanism by which your brain detects depth information through parallax. The VR headset shows each eye a slightly…
This is inaccurate. Unlike IRL in which objects can appear at varying focal distances, requiring the eye muscles to constantly adjust the focal distance of the eye, the two images in a VR headset (one for each eye)…