Viewing profile — mastahyeti
mastahyeti
HN member- Joined
- Tue, Feb 28, 2012, 9:29 PM UTC
- HN karma
- 534
- Public activity
- 35 items
- HN profile
- View on Hacker News ↗
About mastahyeti
No profile information was provided.
Recent public activity
- story
-
comment
Comment #14848745
Which device are you using? With U2F, the browser doesn't send the name of the site to the authenticator.
-
comment
Comment #14845262
From my testing of several hardware U2F implementations, the test-of-user-presence (touching the button) unlocks the device for an amount of time. During this time multiple authent…
-
comment
Comment #14843900
I've only tested on Sierra, so I'm not terribly surprised that this doesn't work. Would you mind opening an issue so I can help debug? https://github.com/github/SoftU2F/issues/new
-
comment
Comment #14842491
It is :-)
-
comment
Comment #14842371
You still have to configure TOTP (SMS or App) 2FA before you can add a U2F device. That might change in the future.
-
comment
Comment #14842362
My understanding is that the FF softtoken was intended to be temporary while they worked on their HID support. That might not be the case any longer though.
-
comment
Comment #14842326
I think the greatest practical threat to TOTP is phishing. U2F, regardless of where keys are stored, binds a keypair to an origin. Only authentication requests from `github.com` ca…
- story
- story
-
comment
Comment #11435465
There is a known bug where leading whitespace can cause the key to not be parsed. Also, check that you're only trying to upload a single key, and not your entire keyring.
-
comment
Comment #11435454
It shouldn't be necessary to push a new signed commit for old ones to start showing the "verified" badge. We do cache some of our templates though, so it may take a while for some …
-
comment
Comment #11434221
GitHub Desktop doesn't support commit/tag signing at this point. Sorry.
- story
- story
-
comment
Comment #10242241
It's only included for browsers that support it. That's Chrome>45 and Firefox>43.
-
comment
Comment #10241293
This isn't a concern with our implementation because a hash of the asset bundle is also included in the URL. This is a pretty common cache-busting technique for static assets and l…
-
comment
Comment #10241272
Thanks. I updated the post and opened a PR to fix the README on sprockets-rails. https://github.com/rails/sprockets-rails/pull/273
- story
- story
- story
-
comment
Comment #6323626
We just added support for India. Try again.
-
comment
Comment #6323625
We just added support for India. Try again.
-
comment
Comment #6322898
There is a setting for a fallback number on https://github.com/settings/two_factor_authentication/config...
-
comment
Comment #6322815
TOTP is standardized. http://tools.ietf.org/html/rfc6238