HNHacker News
TopNewBestAskShowJobs

robxorb

296 karma · joined April 26, 2024

submissionscomments
robxorb··on Ente Auth: open-source Authy alternative for 2FA
Ok, except that the secret is the TOTP generator. Anyone that has the secret can generate any TOTP for any point in time, and own your 2FA. An attacker needs nothing else. So if the secrets are stored online - ever - it's nullifying the "offline" claim.

Does anyone know a 2FA app that only stores secrets offline? Eg without any networking code; as it's not only not required, but IMO is required NOT to be there for it to actually functionally be "two-factor authentication", and therefore locally-isolated.

iCloud is the worst choice of a place to store them as it's the same place the other factor may be routinely saved / backed-up, especially if "across devices".

robxorb··on Ente Auth: open-source Authy alternative for 2FA
> 2FAS syncs across your mobile devices.

[...]

> 2FAS works offline.

> 2FAS doesn't store any passwords or metadata.

Eh?

robxorb··on Ask HN: Is there any software you only made for your own use but nobody else?
That is so cool! It'd be amazing to see a timelapse of the past ten years of someones computer life.

Assuming 8 hours/day average of active screenshots every 5 minutes, would be (8*60)/5 = 96 shots per day. Times 3650 for ten years is 350,400. Divide by 60fps is 5840 seconds, by 60 is 98 minutes. So a decent movie length, as a single video.

Though, I imagine it'd be unfeasible to go through every screenshot and remove sensitive information.

(At a rough ballpark: if it took 20 seconds on average, to analyse and either bin or selectively-censor each screenshot, it'd take about a full working year, 8 hours per day.)

robxorb··on Ask HN: Is there any software you only made for your own use but nobody else?
How does it automate ph changes to the water?
robxorb··on Male dance moves that catch a woman's eye (2010)
> three movement measures were key predictors of dance quality; these were variability and amplitude of movements of the neck and trunk, and speed of movements of the right knee.

LOL, so if a guy stands there cocking his head around wildy on his neck and twitching his right knee as fast as he can, women will be magically drawn to him like moths to a flame?

robxorb··on How random are TOTP codes?
Well, the thirty second window in practice is usually a 2 - 3 minute window, as TOTP servers are set up to allow for drift, network issues, human slowness etc. For sure, memorising more than a handful may be hard but it's just "11 Nov 14:35", etc.

I wonder if something could be set up to be both more secure, and more tailored to this use-case. Be pretty sweet to embed a 2FA in users brains somehow.

robxorb··on How random are TOTP codes?
Not so useless. A user of that could memorise the times/dates where a particular easy-recall code comes up. With that, they have effectively "transferred" 2FA for those times into their brain, and not need to use any 2FA app (at only those times).
robxorb··on Beating NumPy matrix multiplication in 150 lines of C
To your third point - it looks as if the lines of mean values were averaged, this posts code would still be a clear winner.
robxorb··on Goodwatch – A Ham Radio Wristwatch (2020)
Thanks! This makes me wonder if it might be possible to build a wristwatch SDR, essentially the same as this project but with a very wide band into the Ghz, as with some small USB SDR's. It'd be so cool to have something so versatile in Casio form-factor.
robxorb··on Goodwatch – A Ham Radio Wristwatch (2020)
Are there limits on what can be done in a wristwatch? I mean in terms of RF reception? Like, is it possible in such small sizes to receive any frequency, or is there certain limits, say based on heat, or necessary component footprint or other constraints?
robxorb··on Show HN: I created an After Effects alternative
Some crypto wallets, facing similar concerns but with I suppose higher stakes, will provide the user download a local copy of the software, load offline a private tab, close it when done and only then, go back online again.

A bit fiddly for sure - but seems comprehensive enough.

robxorb··on Self-healing 'living skin' can make robots more humanlike
Assuming what you say is true, wouldn't a clamp-down response to it result in a future where people with a propensity to do these fucked-up things have no outlet but a real child, but a more liberal approach have the result of fewer hurt children?

I mean, to me the entire issue is of mental health, and would ideally be addressed that way, but assuming all else is equal any alternative to a kid being harmed should be preferable no matter how otherwise messed up the thing is in and of itself.

robxorb··on An Analog Network of Resistors Promises Machine Learning Without a Processor
As I understand it, they were able to train and classify XOR using 32 of their breadboard nodes, which visually looks roughly a 1 metre square. XOR can usually be done with 1 or 2 neurons. And MNIST digit classification with ~25,000.

Bringing all those numbers together we get 1 neuron = 32 nodes = 1sqm, would give a size of about a 900m square if breadboarded out for ordinary MNIST digits. (Assuming of course, no power transmission losses...!)

I'm hoping, if not outright assuming, that I've made some kind of catastrophic error here.

robxorb··on Tiny bright objects discovered at dawn of universe baffle scientists
[GPT has entered the chat.]
robxorb··on Pulsar – A Community-Led Hyper-Hackable Text Editor
Thank you, I'd never have found that. For future travellers:

https://github.com/pulsar-edit/pulsar

robxorb··on Is Clear Air Turbulence becoming more common?
So this could be a trend in pilot reporting rather than turbulence?
robxorb··on Pulsar – A Community-Led Hyper-Hackable Text Editor
Has anyone found screenshots?
robxorb··on Frame.work laptop now available in Denmark, Finland, and Sweden
Thank you, that's most helpful!
robxorb··on Frame.work laptop now available in Denmark, Finland, and Sweden
Can someone explain to my why some keyboard layouts hide some of the most important terminal punctuation in everyday use? For example, on an Apple Swedish keyboard you're not allowed to natively access your home directory ~, nor pipe anything |.

What idiot came up with that, or is there legitimate reason?

robxorb··on Supreme Court blocks controversial Purdue Pharma opioid settlement
This is my gripe with regular news. Science paper? No link. New law bill? No link. Someone made an hour-long speech? 30 second cut, no link to the full speech. Is it almost as if they'd rather we didn't see their sources?
robxorb··on The Forth Deck mini: a portable Forth computer with a discrete CPU
Substitute "keyboard" for "computer" for most of your comment to see how it misses the point.
robxorb··on Elixir Gotchas
Not requiring a package manager is the point. Python, node, Zig etc supply binaries or a binary installer for each major OS, so why not Elixir? I can't see how it'd be a bad thing for anyone.
robxorb··on Elixir Gotchas
Unless you are fine letting old homebrew work its "magic" - the installation is too lengthy and involved for a new language. It should just be click, download:

https://elixir-lang.org/install.html

That is the biggest gotcha for me. There doesn't seem to be a simple installer or binary you just get up and running unlike other major languages. Is it a distribution issue with erlang or something? I'd have thought it'd be easy to package it up.

robxorb··on Julian Assange has reached a plea deal with the U.S., allowing him to go free
The "edited" version's edited. The unedited version, released by WL at the same time, isn't. The entire war was a crime and killed 150K+ innocents. If the release of video of a fraction of those deaths puts attention on that; excellent journalism.
robxorb··on SIMD-accelerated computer vision on a $2 microcontroller
I wonder how hard it would be, presumably with some trade-off with detection windows, to use a few of these in parallel and process higher resolutions and frame rates?
robxorb··on Julian Assange has reached a plea deal with the U.S., allowing him to go free
What's particularly silly about all that is it's actually Elons jet telling people where it is.

That's how aviation stays safe: the planes broadcast where they are, to anyone and everyone who tunes in to that public signal.

robxorb··on Words you can spell with a calculator (2005)
LLM can you use words only in the following list, to create the longest sentences you can that make sense and read like plausible English sentences?
robxorb··on Pi Gazing is a project to build meteor cameras using Raspberry Pi
Both, and it pays for itself?
robxorb··on Impossibly thin fabric could cool you down by 16-plus degrees
No! It's "cups".
robxorb··on Impossibly thin fabric could cool you down by 16-plus degrees
8.89°C
← PreviousPage 3 of 6Next →