1 Jun 2025 |
K900 | Which is probably a good idea | 14:52:00 |
K900 | Except when you're trying to hack the OTHER END | 14:52:12 |
50^2 | Oh wow what a magic discussion of low level programming. Something like this can't be found in AI🤪
I was having the idea the other day and I wanted to ask your opinion on it's feasibility and impact.
The proof of concept is to turn a smartphone into a crypto wallet, but for managing secrets in general.
Managing secrets is every programmer's headache, we could develop tooling for promoting secure workflows.
Would you find such a device useful in your practice? | 15:09:10 |
50^2 | * Oh wow what a magic discussion of low level programming. Something like this can't be found in AI🤪
I was having the idea the other day and I wanted to ask your opinion on it's feasibility and impact.
The proof of concept is to turn a smartphone into a crypto wallet, but for managing secrets in general.
Managing secrets is every programmer's headache, we could develop tooling for promoting secure workflows. A workflow would be "connect the device to the computer for singing (like git commits for example), store decide in a secure location when not needed"
Would you find such a device useful in your practice? | 15:12:02 |
50^2 | * Oh wow what a magic discussion of low level programming. Something like this can't be found in AI🤪
I was having the idea the other day and I wanted to ask your opinion on it's feasibility and impact.
The proof of concept is to turn a smartphone into a crypto wallet, but for managing secrets in general.
Managing secrets is every programmer's headache, we could develop tooling for promoting secure workflows. A workflow would be "connect the device to the computer for singing (like git commits for example), store the device in a secure location when not needed"
Would you find such a device useful in your practice? | 15:12:19 |
magic_rb | Its called a yubikey | 15:24:35 |
magic_rb | I wouldnt trust a smartphone with my secrets | 15:24:40 |
ElvishJerricco | I warned you so many times lol | 15:37:43 |
Hugo | I have been thinking about doing something similar with a Raspberry Pi. I am not sure whether a smartphone would make the wired communication between the two devices convenient.
My idea was a device to use for:
- password management, one-time-passwords, emulating a keyboard on the host PC
- SSH authentication (could be used as a "proxyjump")
- sign/decrypt files
Yubikeys are great, but the absence of display is a security trade-off.
| 15:35:50 |
emily | well, AFAICT it's easier to find stuff that will eat 2.5GBASE-T and act as a 10G module | 15:37:56 |
Hugo | You may also want to look into Ledger.com devices, they are designed for blockchain wallets but also support GPG and SSH, and have a built-in display in a small form factor. I tested using one for these purposes, and it worked fine. | 15:37:00 |
emily | than what I want | 15:37:58 |
K900 | Honestly you should probably just do that | 16:23:45 |
K900 | Anything but MII over SFP was a mistake | 16:23:51 |
K900 | I will die on this hill | 16:24:00 |
emily | well, at that point I'm relying on the SFP to get things like jumbo frames right, yeah? | 16:26:34 |
emily | I messaged SinoVoip on AliExpress and their automatic response started "Dear friends, welcome to our Facebook group". ok | 16:26:53 |
K900 | Not really | 16:29:29 |
emily | the 1000BASE-T transceiver I'm using right now can't handle them at least | 16:30:02 |
K900 | OK so I am still not sure WHY | 17:43:30 |
K900 | But I'm pretty sure the MAC is not getting to the right mode for 2500base-x operation with this thing | 17:44:06 |
K900 | But the phylink mode setup code is absolutely ridiculous | 17:44:44 |
K900 | And it's basically impossible to debug it when the phy on the other end gives up on you after like 15 seconds | 17:46:16 |
K900 | And also runs my primary home network | 17:46:23 |
K900 | So I'll just live the 1000base-x life for now | 17:46:33 |
emily | what advantage would 2500 give you? slightly more throughput from less overhead on the link or something? | 17:52:54 |
K900 | Yeah and in theory they can do up to 2gbps link rates on the ISP end | 17:53:54 |
K900 | Though it is priced at "call us for a quote" | 17:54:07 |
K900 | They technically offer up to 10G in some areas but the way to check availability is, you guessed it, call them for a quote | 17:56:15 |
K900 | But 2G down is technically within spec for vanilla GPON | 17:56:46 |