Hacker News Reader

Sorry about that. It’s only a couple of API calls, the node.js example might be sufficient?

If anyone wants to experiment and add Web Authentication to your web app we’ve built an API that makes it really easy to get started: https://Passwordless.dev

I’ve spent the last 4 years working on the fido2-net-lib and been running the Passwordless api for about two years now. Happy to answer any questions.

dymlon Guide to Web Authentication

It’s available at https://Passwordless.dev.

I’ve worked on a open source library for fido2 for about 4 years and we created an API that makes it A LOT simpler to get started.

And when ever you want to leave the API/Service you can just migrate to whatever self hosted webauthn service you’ve setup.

Happy to answer any questions.

dymlon Apple Passkey

Good idea, thanks!

dymlon Apple Passkey

Biometrics are not needed, however device support is not 100%.

If the user is not running a model OS they could still be supported by using what is known as a security key (yubico) etc.

The Passwordless API can also help with out of band authentication (using a iOS device to sign in on unsupported old laptop)

dymlon Apple Passkey

Hey! Happy to hear Making this tech available has been our goal since inception

dymlon FIDO Alliance

Yes, fido2 defeats allot of the attack vectors for phishing attacks and is great.

While physical devices probably will mostly be used for enterprises and us nerds, “platform Authenticators (e.g passkeys) offer much of the same security without the physical device

dymlon FIDO Alliance

Please note that verifying Metadata is optional for a RP (site owner) and very few sites need it. Without metadata information the privacy is improved.

Disclosure: We built an open source library and an API that makes it easy to add WebAuthn/Fido to your existing web app. It’s available at for those who want to take a look. https://www.passwordless.dev/

There is also a more configurable demo page for the library where you can turn metadata on/off (the api is default off)

dymlon Apple Passkey

This is wonderful news! If anyone is interested in experimenting we built an API that makes it very simple to add WebAuthn (passkeys) to your existing web app.

It’s available at https://passwordless.dev

Note: We also maintain the open source fido2-net-lib, the API just lowers the friction for devs.

dymlon Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in

Yep, that checks out. In the demo I’m hiding the button if “platform” authentication is not available.

The API itself work great with yubikeys (“cross-platform”) and I use them myself.

dymlon Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in

Thanks for this report, probably me who was lazy when setting css breakpoints.

dymlon Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in

Interesting! I’m using Firefox too, so it’s not a browser issue.

What device are you on? Unfortunately your device seem to not support “platform”-authentication (built in, TPM based)

I test for platform support but mistakenly only hide the test button, not the text queue. Thanks for telling me.

dymlon Yahoo Japan's password-free authentication reduced inquiries, sped up sign-in

It’s really great to see the adoption of WebAuthn rise

I’ve been working on one of the leading open source servers for a couple of years and it’s nice to see the real world benefits.

If anyone is interested we run an API[0] that makes it really easy to get started with WebAuthn

[0]: https://www.passwordless.dev/

dymlon Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard

Shameless plug: if anyone wants to try this out I built an API: https://www.passwordless.dev/

(I’m also the creator and maintainer of fido2-net-lib)

dymlon Thinking about Passwords

I agree that WebAuthn is complicated (I’ve read the W3C spec more times than I care to admit).

Disclaimer: I maintain an open source FIDO2 library.

However WebAuthn has the might of device-, OS and browser makers behind it which improves the chances of wide adoption and “what users will expect”-rate.

For those who do not want to understand all the complexity, but still leverage high security and “fingerprint / faceid” sign in on their web app we created passwordless.dev.

It’s a very easy way to try out and implement webauthn in your project. Happy to help fokes get started if you’re interested!

You can get your API key or run the demo on:

https://passwordless.dev

dymlon Ask HN: What is your “I don't care if this succeeds” project?

https://listentothe.cloud/

I built it to be an example to explain APIs. Turned out to beautiful to listen to, so I keep it alive for my own amusement.

dymlon I wrote a children's book / illustrated guide to Apache Kafka

This was really great. I would like to see more content like this.

dymlon Ask HN: Clever ways to handle API access but avoid signup?

Hmm.. you're right that it might introduce uncertainty about key formats, allowed chars/length etc.

I'd like to avoid JWTs and use the simplicity of "Basic" (username/password)... but borrowing your idea I could generate it clientside on the website? Enter email and immediately display a API key (base64 of email+random secret/guid) that is stored ("activated") when the first API call hits the server.

If you try to call the API with same email but different secret, it's 401.

It's indeed going to have a free tier with throttling. A paid tier with other rate limits and some premium features might come down the road.

dymlon You are listening to San Francisco

I need to use a video stream which is embedded through flash :)

dymlon You are listening to San Francisco

Oh! Happy to see Listen to the cloud posted here! It’s been a crazy ride since I built it last November. I went viral in Russia and Kazakhstan And were interviewed by a Spanish newspaper called El Mundo together with Eric (who made youarelisteningto). The best outcome of it was receiving an email from a developer who had a lot of problem with ADD and anxiety and he told me about how listentotheclouds helped him focus while at work and expressing the gratitude. It’s very humbling to hear that something you built just for fun actually helps others in ways you had no idea it would.

dymlon Listen to the Clouds

ben, did you get the video? Seems like the video is the cause of the CPU load, and i'm actively moving away from the video.

dymlon Listen to the Clouds

@danso Wouldn't it be cool if it would be a player card? So it would actually broadcast (maybe a recording?) of the music+radio

dymlon Listen to the Clouds

Reading this makes me smile. Thank you

dymlon Listen to the Clouds

I got you covered man! http://listentothe.cloud/s

dymlon Listen to the Clouds

Thank you, will do! :)

dymlon Listen to the Clouds

Thanks for the leads. Will rewrite it to use PNGs and CSS animations instead of the youtube video! :) This is all a learning journey for me, so it fits right in! :)

dymlon Listen to the Clouds

That's really surprising. I have no problems on my win machine which I guess is why I missed it.

Is it the same problem even if you run it in backgorund? Have some listeners that will pause the youtube video when that happens (which should minimize CPU)

dymlon Listen to the Clouds

Wow, surprised to see this on HN!

Creator here, if you have any feedback, please just comment here or ping me on twitter @andersaberg, I'll take airport requests etc there :)

Have a good one, A

dymlon WordPress on .NET

This is amazing and from the comments I've heard that Microsoft is around supporting the development of this? Is there any MS material mentioning this effort? I'm really impressed by your work

dymlon Music for Programming

Listen to the Cloud - I listen to a nice mix of Ambient music and ATC radio chatter at http://listentothe.cloud. I built this a couple of days ago and topped at /r/programming