Also, if someone logs in with correct username and password and -does not- attempt to try the 2FA, I also want to know about it.
Tell HN: Somebody implemented something I wrote a blog about
71–80 of 253 posts
Re: Tell HN: Somebody implemented something I wrote a blog about
#72Years back, every web browser's built-in password manager locked up the page when submitting a login form, waiting for the user to answer "do you want to save this password?" before proceeding. I thought that was silly: how do I know if I want to save the password before I've seen whether it's correct? Which I can't see until the form is submitted. At the time I was using Opera, so I wrote in to their customer suppor…
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
Re: Tell HN: Somebody implemented something I wrote a blog about
#73Earlier quoted context omitted.
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
Wikipedia lists Opera v4 having tabs in 2000, while they were added to Mozilla 0.9.5 in 2001: https://en.m.wikipedia.org/wiki/Tab_(interface)
Re: Tell HN: Somebody implemented something I wrote a blog about
#74Earlier quoted context omitted.
> leak whether or not a password is correct Errm, could you elaborate what is the issue here?
tl;dr: The code should verify the user's second factor before the user's password. Consider this, scenario A: 1. When attacker enters a username and bad password. then they receive a bad password error. 2. When attacker enters a username and good password, then they receive a 2FA prompt. And then scenario B: 1. When attacker enters a username and bad password, then they receive a 2FA prompt. 2. When attacker enters a…
But which 2FA prompt should they receive?
If MFA can be configured using myriad choices, should a user be prompted to "Insert security key" or "Input security code" or "Send code to your email/SMS" or "Tap YES on your mobile device"?
Since you can't know a priori what the second factor will look like, I'd say it's troublesome to try and present a challenge to every user regardless of their MFA configuration.
Re: Tell HN: Somebody implemented something I wrote a blog about
#75When Apple released the very first iPod, I wrote to Steve Jobs to tell him that I would buy it if it was a phone too, as i don't want to carry two devices. I doubt I was the only one who had this thought, but I like to think i influenced the development of the iPhone. I never received a response from Steve.
Re: Tell HN: Somebody implemented something I wrote a blog about
#76I once wrote something obscure.
About communication piggybacked over TCP/IP without changing any one bit of packet data.
https://egbert.net/blog/articles/pulse-width-covert-channel....
Some 20 years later, a guy posted on GitHub.
https://vimist.github.io/2019/01/30/Steganographic-Packets.h...
And made my day.
Re: Tell HN: Somebody implemented something I wrote a blog about
#77Earlier quoted context omitted.
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
IIRC it was InternetWorks by BookLink Technologies
According to: https://www.makeuseof.com/tag/which-browser-invented-tabs-3-...
Re: Tell HN: Somebody implemented something I wrote a blog about
#78I havnt done this in many years but for a while I was making creative content that was published online. Once in a while someone would contact me saying they liked what I did. I started doing the same. If I read an article I liked a lot I would contact the person and tell them I liked it and why. About half the time they responded with Thanks. I didnt do this with NYT writers or anything. Just people who clearly dont…
This was a good comment. Keep it up!
Re: Tell HN: Somebody implemented something I wrote a blog about
#79Years back, every web browser's built-in password manager locked up the page when submitting a login form, waiting for the user to answer "do you want to save this password?" before proceeding. I thought that was silly: how do I know if I want to save the password before I've seen whether it's correct? Which I can't see until the form is submitted. At the time I was using Opera, so I wrote in to their customer suppor…
I discovered a bug in Java 1.0.1's GridBagLayout and posted about it to USENET. It was fixed in JDK 1.0.3.
I also emailed the GIMP maintainers about a bug in their select color region tool in GIMP 0.99.x that made it ignore 1-pixel-wide barriers. By 1.0 it was fixed.
I was chuffed when it happened, but the internet was a smaller, chummier place back then, so we expected that kind of response more than we do today, I think.
Re: Tell HN: Somebody implemented something I wrote a blog about
#80Earlier quoted context omitted.
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
[deleted]