Viewing profile — atoponce

The source code is open source. Please point to the lines of code where the backdoor exists.

You can't get right/left balance metrics with a single pod. Several old metrics are now applied to both feet, so you can compare right to left. EG, if you notice your right leg spr…

Biometrics aren't the second factor when using WebAuthn, the hardware security key is. But anyone with access to the security key can use the second factor. Biometrics would tie th…

2FA is rife with problems. FIDO2/WebAuthn isn't tied to biometrics and can be inconvenient. TOTP can get out of sync and can be phished. Email can also be phished. Voice and SMS ar…

I was very disappointed in that Kickstarter. Yubikey ran a 54% off discount May 4th last year and not knowing when I would get my v2 SoloKeys, I purchased two. I had them within th…

Very structured with lots of very visible patterns in your JavaScript demo site. Some screenshots: https://imgur.com/a/2zQh4bA

His slides to his talk have been posted. I'll like the video to the talk when it's up. https://tobtu.com/blackhat2022/

It's not my repo, so I don't know. I don't see any specific criteria, so if you see a project missing that should be added, send a pull request.

> https://articles.59.ca/doku.php?id=pgpfan:tpp Some rebuttals to that critique outline that the author doesn't fully understand the arguments Thomas Ptacek laid out, and may have …

I see. You're defining resynchronization of the register during decryption as recovery, not parity checks for recovering corrupted data. Fair enough.

What exactly is an OpenPGP recovery property? Can you point it out in the RFC?

The patents in question are https://patents.google.com/patent/US7949129B2/ and https://patents.google.com/patent/US8321675B2/

> On the other hand, virtualization _already_ lets you run whatever arm64 BSD, Linux, or Windows that you want. The trackpad and everything else will work flawlessly thanks to gues…

No problem. I dig the project. Very cool. I would recommend the default be 6 words, and let people choose down to 4, but not lower. At last that way, users know what a "secure defa…

Further, sufficiently seeded cryptographically secure RNGs are indistinguishable from true random white noise, so from a practical perspective, there is no point to require "true r…

I audit web-based password generators as a hobby, and this one does well. What it does well on: The source code is open source licensed. Passwords are generated in the client, not …