Live data from Hacker News

Viewing profile — mastahyeti

mastahyeti

HN member
Joined
Tue, Feb 28, 2012, 9:29 PM UTC
HN karma
534
Public activity
35 items

About mastahyeti

No profile information was provided.

Recent public activity

  1. story
  2. comment
    Comment #14848745

    Which device are you using? With U2F, the browser doesn't send the name of the site to the authenticator.

  3. comment
    Comment #14845262

    From my testing of several hardware U2F implementations, the test-of-user-presence (touching the button) unlocks the device for an amount of time. During this time multiple authent…

  4. comment
    Comment #14843900

    I've only tested on Sierra, so I'm not terribly surprised that this doesn't work. Would you mind opening an issue so I can help debug? https://github.com/github/SoftU2F/issues/new

  5. comment
    Comment #14842491

    It is :-)

  6. comment
    Comment #14842371

    You still have to configure TOTP (SMS or App) 2FA before you can add a U2F device. That might change in the future.

  7. comment
    Comment #14842362

    My understanding is that the FF softtoken was intended to be temporary while they worked on their HID support. That might not be the case any longer though.

  8. comment
    Comment #14842326

    I think the greatest practical threat to TOTP is phishing. U2F, regardless of where keys are stored, binds a keypair to an origin. Only authentication requests from `github.com` ca…

  9. story
  10. story
  11. comment
    Comment #11435465

    There is a known bug where leading whitespace can cause the key to not be parsed. Also, check that you're only trying to upload a single key, and not your entire keyring.

  12. comment
    Comment #11435454

    It shouldn't be necessary to push a new signed commit for old ones to start showing the "verified" badge. We do cache some of our templates though, so it may take a while for some …

  13. comment
    Comment #11434221

    GitHub Desktop doesn't support commit/tag signing at this point. Sorry.

  14. story
  15. story
  16. comment
    Comment #10242241

    It's only included for browsers that support it. That's Chrome>45 and Firefox>43.

  17. comment
    Comment #10241293

    This isn't a concern with our implementation because a hash of the asset bundle is also included in the URL. This is a pretty common cache-busting technique for static assets and l…

  18. comment
    Comment #10241272

    Thanks. I updated the post and opened a PR to fix the README on sprockets-rails. https://github.com/rails/sprockets-rails/pull/273

  19. story
  20. story
  21. story
  22. comment
    Comment #6323626

    We just added support for India. Try again.

  23. comment
    Comment #6323625

    We just added support for India. Try again.

  24. comment
    Comment #6322898

    There is a setting for a fallback number on https://github.com/settings/two_factor_authentication/config...

  25. comment
    Comment #6322815

    TOTP is standardized. http://tools.ietf.org/html/rfc6238