U2F is supposed to be immune to MITM because of the information sent in the protocol, protected by the encryption. I'm not familiar enough with it to know if it's really immune or not.
It's not the manufacturer that AWS wants to read, it wants the attestation certificate, and Yubico's are signed with their Root CA, so it's not something you can emulate. https://developers.yubico.com/U2F/Attestation_and_Metadata/
I tried setting up my AWS account with a Tomu setup with U2F firmware and AWS rejected it.
Yeah, a similar observation is that there are more atoms in a glass of water than glasses of water in all the oceans. So, dumping a glass of (somehow trackable) water into the ocean would eventually cause every glass of water to contain atoms from that glass. See also: http://samkean.com/books/caesars-last-breath/
I don't understand the start-off of "not really". Is that in reference to the first sentence or the 2nd? I think the "1Password-autofill" protects you against phishing because if you go to a legit site, the domain will match and 1Password will autofill. If you go to a phishing site that just looks right (Unicode domain, whatever), but doesn't match exactly then the auto-fill won't happen and you'll be tipped off.
Sense looks really attractive to me, except the part where they get all the data. If they had a self hosted solution that I could run on a Raspberry Pi or even a “real”computer to do the data collection and processing, I’d be in.
Before OS-X would let you do that, I took my PowerBook's keyboard out, cut the trace and redrew the traces to connect the CapsLock key to the Control traces. :-)
Now it's done by simply going to System-Preferences=>Keyboard=>Modifier Keys
My ex-wife was getting her Geology BA when we got a new dog. We thought “Toba” would be a great name. It wasn’t, she tried and tried to live up to her namesake.
Within the first few hours I was in Honolulu for the first time I went to cross a street with the "walk" signal and had a driver blow through the red, probably 5 seconds or more after I'd gotten the "walk" signal. I wouldn't walk around Honolulu staring at my phone if you paid me.
Because he wipes (writes to) the read-only USB stick? (The one that's had the firmware replaced with BadUSB, and which he then sticks in some other piece of hardware where it takes control of the machine and uploads his private key?
I think it's less about throughput and more about durability guarantees. Kafka producers can specify the number of 'acks' (brokers which have written the message to disk) when they produce a message and the request will only return successfully if that can be done.