Viewing profile — Zinggi

Pretty sure you mean this one: https://thedailywtf.com/articles/The-Speedup-Loop

In JS, my preferred way of handling json is heavily inspired by the elm json decoding way. I want my decoders to essentially do 2 things: 1. Transform received data into a data str…

You shouldn't validate json. You should parse it, e.g. transform it into your desired data structure if it comes in in a valid shape. https://lexi-lambda.github.io/blog/2019/11/05/…

You might be interested in lamdera. It abstracts away database access, data transport and data encoding between client end server. Here is a talk about it: https://www.youtube.com/…

Thank you! Well put.

> the Android app requires no device permissions That's not true, it just uses the new way to ask for permissions. E.g. when you want to scan a QR code it requires the camera permi…

Yep, from a user perspective it definitely looks like 2FA. In terms of technology it's of course completely different.

Ah ok, got it. If you are already using KeePass than there is no reason to use NoKey, KeePass is great! > Not everyone has a million devices. I don't think that's fair. With 3 devi…

But wouldn't you agree that your brain + NoKey instead of a piece of paper as a backup would be more secure? And more convenient, as you don't have to type your passwords anymore. …

Exactly. Or even 3 if you make use of security level 3. The only exception is at the start when there are no passwords stored yet.

When pairing a new device (or in this case a new browser), that device doesn't automatically get any keys! When adding a new device, to complete the setup you also have to be able …

Yes, but it's a very bad idea. If you'd do this, you could unlock your passwords with a single device by confirming on Firefox or vice-versa on Chrome. This of course also means th…

Oh, than I misunderstood, sorry. You're absolutely correct.

Thanks. I was always wondering why others don't do this more often. I find it much easier to remember and type in a few words compared to a long number.

> Doesn't this increase your attack surface greatly though? That's true. I suppose it's a trade off between protection against lost vs. smaller attack surface. > Since there's no m…

You lose access to your passwords, that's the consequence of that approach. That's why it's a very good idea to pair as many devices as you can, e.g. an old phone, your work PC, et…

Hi all! This is my first time posting something to HN, so please be kind. I wanted to show what I’ve been working on for the last 6 months: NoKey, a password manager without a mast…