Web USB
-
@sloosecannon Hmm.....if it weren't already Friday after clocking out I'd start some experiments...
-
@boomzilla said in Web USB:
@sloosecannon Hmm.....if it weren't already Friday after clocking out I'd start some experiments...
Lol. I'm trying to get screenshots right now, but my setup isn't complying :/
Probably doesn't like me not having the root ca. Or something. It's been a while since I used this computer with a sc...
-
@boomzilla said in Web USB:
@sloosecannon I just thought that talking to smart cards required some additional software for both Chrome and Firefox (like ActivClient or opensc). They always have in my experience.
@boomzilla is correct. Since, to the best of my knowledge, Firefox doesn't come with a PKCS11 implementation, you need middleware. Chrome does not on Windows because it piggybacks on Schannel for this functionality.
I don't have a satisfactory answer as to why Firefox doesn't have a PKCS11 implementation; there's plenty freely available that can hook into NSS. But I also haven't looked into it too much, since the browser of choice is IE. When it comes down to it, that's a deficiency in Firefox and not in the server side using a bog-standard TLS implementation.
-
@heterodox said in Web USB:
@boomzilla said in Web USB:
@sloosecannon I just thought that talking to smart cards required some additional software for both Chrome and Firefox (like ActivClient or opensc). They always have in my experience.
@boomzilla is correct. Since, to the best of my knowledge, Firefox doesn't come with a PKCS11 implementation, you need middleware. Chrome does not on Windows because it piggybacks on Schannel for this functionality.
I don't have a satisfactory answer as to why Firefox doesn't have a PKCS11 implementation; there's plenty freely available that can hook into NSS. But I also haven't looked into it too much, since the browser of choice is IE. When it comes down to it, that's a deficiency in Firefox and not in the server side using a bog-standard TLS implementation.
Confirms my suspicion then.
Chrome works fine, never used Firefox :)
I wonder how Edge plays (LOL it probably doesn't)
-
@sloosecannon Edge works great. It doesn't have the annoying problem IE sometimes had where your PIN prompt would pop "under" the browser window (I can see why it wouldn't want to steal focus but that's been a problem from XP all the way through Windows 7, at the least).
-
@heterodox said in Web USB:
@sloosecannon Edge works great. It doesn't have the annoying problem IE sometimes had where your PIN prompt would pop "under" the browser window (I can see why it wouldn't want to steal focus but that's been a problem from XP all the way through Windows 7, at the least).
Huh. TIL.
I love how the MS designed programs are all careful about stealing focus (normally). And then you install some random 3rd party thing and ALL THE FOCUS STEAL.
-
@bb36e I don't understand how this would help.
Arduino boards of course. It's the first example in the Google manual.
32-bit MCU with 1 GB of flash
whereIn related news: fortunally http://webdma.com/ is still under constraction
-
32-bit MCU with 1 GB of flash
whereIn my hyperbolic world of wasted resources for Digital Restrictions Management at least. I don't have a clue what Apple actually uses. But even if it had those specs: its explicit purpose is to keep you from doing stuff that's not covered by the EULA so it's prolly no good for running Linux.
-
On a related note: Web Bluetooth.
Filed under: Coming soon: web ethernet, webwifi
-
@cvi
I'm waiting for webweb
When we reach webwebweb we could shorten it to www
-
If I try a third time it starts replacing the second nesting level, though.
-
-
Wait, that's a chrome:// url. In firefox
Also, there's your vertical tab stacking! :P
-
@Zecc WAT
-
@RaceProUK
Technically, SHA-1 is known to be breakable for a reasonably low cost of generating a collision. But there aren't any documented cases of someone actually generating a collision and using it to impersonate a good actor yet.
-
@sloosecannon I think Firefox has been calling it chrome since before Chrome.
-
@sloosecannon
chromeis the standard term for the bits of a web browser that aren't webpages :P
-
there aren't any documented cases of someone actually generating a collision and using it to impersonate a good actor yet.
I would have thought anybody sufficiently skilled in the dark arts to be capable of doing this would also have good enough opsec that nobody would notice them doing it.
-
@flabdablet
Anyone with enough "dark arts skillz" to care about opsec works for a government and just has Cisco install backdoors directly on their switches. SHA1 collisions are theoretically possible with a few million bucks on an AWS instance at this point; if they were more plausible than that, organized crime syndicates would be duplicating your bank's HTTPS certificate and using that in their money making arsenal, and we'd be hearing about it on /.
-
@marczellm said in Web USB:
@sloosecannon I think Firefox has been calling it chrome since before Chrome.
Much like git calls its higher-level stuff "porcelain" and its low-level stuff "plumbing"; the former is there only to look good for the user while the latter bits are the ones that deal with all the shit.
-
git calls its higher-level stuff "porcelain"
So Git accepts it's a toilet?
there only to look good for the user
Wait, there are bits below the Git UI that are worse looking?
-
Much like git calls its higher-level stuff "porcelain" and its low-level stuff "plumbing"
So, the creators of
gitthemselves think of it as a toilet. Good to know
-
-
@flabdablet said in Web USB:
I would have thought anybody sufficiently skilled in the dark arts to be capable of doing this would also have good enough opsec that nobody would notice them doing it.
Finding any collision is fairly easy. Finding a collision between a nominated document and some other document that you control is much harder, especially given that such protocols also call for standard normalisation algorithms that exclude most opportunities for shenanigans. There's much easier ways to attack systems (see also punching through the drywall instead of picking the virtually-unpickable lock).
-
(see also punching through the drywall instead of picking the virtually-unpickable lock)
LOVE that movie...
-
@Rhywden Your use case makes no sense to me. Then again I don't know what a "hosted web apps" is, must be some WIndows thing.
-
@Rhywden Your use case makes no sense to me. Then again I don't know what a "hosted web apps" is, must be some WIndows thing.
Yes. If only something existed which enabled you to enlighten yourself. Something like a tool which searches the web for key phrases.
Someone should invent that!
-
@Rhywden Your use case makes no sense to me. Then again I don't know what a "hosted web apps" is, must be some WIndows thing.
Yes. If only something existed which enabled you to enlighten yourself. Something like a tool which searches the web for key phrases.
Someone should invent that!
Filed Under: I'm surprised this still exists
-
@Rhywden Your use case makes no sense to me. Then again I don't know what a "hosted web apps" is, must be some WIndows thing.
Yes. If only something existed which enabled you to enlighten yourself. Something like a tool which searches the web for key phrases.
Someone should invent that!
Filed Under: I'm surprised this still exists
Perfect time for CSS to not load
-
@Rhywden Your use case makes no sense to me. Then again I don't know what a "hosted web apps" is, must be some WIndows thing.
@blakeyrat alt confirmed
welcome back, blakester!!
-
@Jaloopa Lycos still exists?
-
-
-
-
@RaceProUK said in Web USB:
So, the creators of git themselves think of it as a toilet.
Given the average quality of code that runs through git it's probably a decent analogy.
-
@boomzilla said in Web USB:
@RaceProUK said in Web USB:
So, the creators of git themselves think of it as a toilet.
Given the average quality of code that runs through git it's probably a decent analogyl
Needs some modification to be more accurate. The toilet has 7 different flushing levers so you can flush with different chemicals other than water, three of them don't do anything obvious but have pages and pages of documentation that nobody understands, and the one placed in the regular spot flushes in reverse and sprays the contents of the sewer up your arse. It also has a bidet, which just re-uses the flusher mentioned before. Finally, you have to refill the holding tank with the bathtub and a bucket, because Linus thinks hooking it straight up to the water line is too much like Subversion.
-
The toilet has 7 different flushing levers so you can flush with different chemicals other than water, three of them don't do anything obvious but have pages and pages of documentation that nobody understands, and the one placed in the regular spot flushes in reverse and sprays the contents of the sewer up your arse. It also has a bidet, which just re-uses the flusher mentioned before. Finally, you have to refill the holding tank with the bathtub and a bucket, because Linus thinks hooking it straight up to the water line is too much like Subversion.
And even when you've got it figured out, and have the controls mastered, it still periodically sprays shit everywhere and then punches you in the face just because.
-
@loopback0 said in Web USB:
The toilet has 7 different flushing levers so you can flush with different chemicals other than water, three of them don't do anything obvious but have pages and pages of documentation that nobody understands, and the one placed in the regular spot flushes in reverse and sprays the contents of the sewer up your arse. It also has a bidet, which just re-uses the flusher mentioned before. Finally, you have to refill the holding tank with the bathtub and a bucket, because Linus thinks hooking it straight up to the water line is too much like Subversion.
And even when you've got it figured out, and have the controls mastered, it still periodically sprays shit everywhere and then punches you in the face just because.
But you can get one of these for free with several companies, unless you want to close the door and keep your shit(ting) to yourself.
-
so you can flush with different chemicals other than water
That's not git, that's hg.
Flushing 240lbs of Mercury – 13:56
— Cody'sLab
-
@flabdablet I do hope they isolated the plumbing for that experiment
-
@RaceProUK I didn't watch that, but if it's the same one I watched a while back, yes. The toilet is just mounted on a big wooden box, or something like that, with a big bucket to catch the outflow.
Lycos.com
