HN user

dokument

201 karma
Posts5
Comments75
View on HN

Netflix is hosted on AWS to name just one such instance. I have heard that internally the customer names are obfuscated, including other Amazon services. Indeed it would be a death sentence to prioritize themselves.

Issues with login.gov don't make me very confident.

Try putting in 2 lower security passwords but then backspace deleting them and you get.

zxcvbn.feedback.use_a_few_words_avoid_common_phraseszxcvbn.feedback.no_need_for_symbols_digits_or_uppercase_letters

visible on the screen. I get it isn't a technical issue but still, doesn't give me confidence

- Hosting personal website from my DMZ at home.

- SDR and packet radio (Direwolf) projects

- Kodi

- rpi zeroW with usb serial for connecting back to my house from work/travel.

I had more projects, but I've been able to replace them all with ESP8266's. Rpi is overkill to do simple things like toggle a gpio pin or take temperature readings. Use it if you have it, but it's nice freeing up extra rpi's with a $2 ESP.

Additionally having a non-standard port does help defend against 0day exploits before patches are available or before you are able to disable the port.

So basically U2F clones. It would be neat to have some sort of CA between U2F devices, device A could sign device B and be put away, and device B could store the signing and share that with sites. This would allow device A to revoke device B completely, but would require a change of u2f support.

I understand the counter piece, but let's say someone steals your primary U2F, can't they just increment the counter to 1000002 and it would keep working even if you have used your backup token?

I've always wanted to make an open source autonomous watercraft to collect data. I also think some open source uplink buoys would be sweet. Then your craft could offload lots of data to them (which would be pushed to the internet) instead of paying for satellite time or trying to coordinate picking up your craft manually.

| Do you consider that a CAPTCHA? Yes:"Completely Automated Public Turing test to tell Computers and Humans Apart"

But funny enough, I believe that data is used to help with machine learning to identify the objects, so we are CAPTCHA'ng ourselves into harder and harder CAPTCHA's.

The "I am not a robot" types are interesting because they don't just test you, they monitor your behavior. "If it looks like a duck, swims like a duck, and quacks like a duck, then it probably is a duck."

Bandwidth and local storage considerations are missing from this. All of those features are great, but if my decentralized application uses all of my available bandwidth and disk space, then it is not very great.

This is very relevant because decentralized means that all that centralized storage and bandwidth needs to split up and amplified to account for offline users.