Viewing profile — gre345t34

To be fair, the webauthn spec expressly forbids facilitating the extraction of credentials from the authenticator (though arguably even syncing between devices violates the spec).

Ideally you should not be able to determine whether a username is valid without authenticating.

If you got tricked into logging into goggle.com or something the FIDO2 auth would fail because a) the URL would not match the credential metadata and b) the resulting assertion, a …

A FIDO2 credential can be used for passwordless authentication, so long as the authenticator performs user verification (e.g. requires a PIN). This counts as 2FA because it's somet…

The article assumes quite a bit of knowledge of FIDO2 and your confusion is understandable. > How/why? What's the connection to passkeys or HSMs? Passkeys are implemented on top of…

Tell me about it. All of the terminology around FIDO is super confusing, and FIDO themselves make no effort to clarify or acknowledge the confusion. Everyone (including Yubico) use…

CTAP1 is only used for talking to old U2F keys. Additionally, U2F/CTAP1 does not support resident keys anyway (IIRC).

Primary issue with FIDO is not the specs themselves but the extremely confusing nomenclature that FIDO put zero effort into clarifying.

It's like murder but scaled up.

There's a certain amount of cosmic irony involved whenever someone calls LLMs 'stochastic parrots' or whatever.

The context is that US is developing high altitude balloons for detecting hyper-sonic weapons. Developing a technology and actively using in another country's airspace are quite di…

Yeah, kinda of disappointing for the author to disavow his own cautionary tale about AI, because obviously only meat can be conscious I guess.

Can you tell us how to determine which tasks require "understanding" and which don't, so that we may make accurate predictions about what tasks LLM's will be capable of in the futu…

As far as I can tell, it's a library that implements CTAP2 (which it erroneously refers to as webauthn).

Why should hackers be prosecuted for using systems as they're programmed?

Tell that to the Omicronians.

Because there are lenses in the headset that focus the two images at a set focal distant (between a couple of meters and infinity focus, depending on the headset). You need glasses…

You are confusing optical focus (like a camera lens or the lens in your eye) with stereopsis - the mechanism by which your brain detects depth information through parallax. The VR …

This is inaccurate. Unlike IRL in which objects can appear at varying focal distances, requiring the eye muscles to constantly adjust the focal distance of the eye, the two images …