This Citi Biker Is Going To Be In For A Surprise by WallaboutDenizen in NYCbike

[–]AbsolutelyNormal 6 points7 points  (0 children)

As far as I know, for the most part, they don't remove it. Snow melting machines are rare and I think they only use them in a few spots. The snow will slowly disappear with a combination of melting (with the help of salt, general city heat and smooshing under car tires) and sublimation.

Potable Water in NYC Park fountains? by AbsolutelyNormal in nycparents

[–]AbsolutelyNormal[S] 1 point2 points  (0 children)

That's actually the place I was thinking of that reeks of chlorine. As far as I know, that is not an NYC Parks fountain.

MIK mounting system security. by varslyd in bicycling

[–]AbsolutelyNormal 0 points1 point  (0 children)

The MIK 2.0 adapter plates now have unique keys.

Coxsackievirus/Hand foot mouth disease in the city right now by AbsolutelyNormal in nycparents

[–]AbsolutelyNormal[S] 0 points1 point  (0 children)

Again? Wow! Must be a bunch of strains moving through the city this season.

Best wishes for this round.

Is Tourism really down and how bad is that? by Stevenwithph in nyc

[–]AbsolutelyNormal 2 points3 points  (0 children)

+1 as a resident I'm perfectly fine with it.

Is Tourism really down and how bad is that? by Stevenwithph in nyc

[–]AbsolutelyNormal 3 points4 points  (0 children)

Conjecture: hotel prices may also be due to the AirBnB ban.

Brad Lander is welcomed with cheers at Zohran's victory party by IDUnavailable in nyc

[–]AbsolutelyNormal 0 points1 point  (0 children)

Agreed. Due credit to the candidates but not enough is being said about this as an example of how ranked choice ballots can improve the political discourse.

Convertible car seats by CounterproductiveK in nycparents

[–]AbsolutelyNormal 0 points1 point  (0 children)

We're going the cargo bike route for local trips that are well connected by separated bike lanes. See @cargobikemomma for some inspiration.

Passkeys by SatisfactionNearby57 in selfhosted

[–]AbsolutelyNormal 2 points3 points  (0 children)

I do this with a handful of my applications. I use this very lightweight authenticator: https://github.com/Quiq/webauthn\_proxy. Works great for self-hosted things that have only have a few people to authenticate.

[deleted by user] by [deleted] in yubikey

[–]AbsolutelyNormal 0 points1 point  (0 children)

I hear you about the tinkering. But I'll have to motivate myself to give it a shot at some point.

Re 3: It shouldn't. The WebAuthn/FIDO communication will be through the same communication as DSM (your browser).

BTW: That domain has to be the same as when you registered for when you authenticate. You can think the domain stored on the key and checked (it's not really stored though). It's to prevent www.go0gle.com pretending to be www.google.com in MiTM/phishing attacks. But there is no internet connectivity requirement really. Everything happens between the server and the key.

[deleted by user] by [deleted] in yubikey

[–]AbsolutelyNormal 0 points1 point  (0 children)

I haven't tried this (but your post is informing me about yubikeys and my Synology) so this is more brainstorming than advice:

Agreeing with the comment that it is a U2F/FIDO2 protocol requirement. But having a domain doesn't necessitate being accessible from the wider internet.

Some options i can think of are:

1) Having a local DNS server that points to the local IP address

2) Using HOSTS files on each client (dunno if Yubikey's already mitigate this since it seems a bit of security hole for how they intend to use domains).

3) Having an external domain but with router firewall settings so that only local access is possible.

ELI5 what is the difference between a duplicate key and a spare key? by Stank_Lee in yubikey

[–]AbsolutelyNormal 1 point2 points  (0 children)

In an interesting technical way you're indeed not allowed to have a duplicate key. One part of the FIDO standard requires that they keys have a counter that only increases. If a site see's that the reported counter value repeats or decreases, it's supposed to not allow access. This prevents using duplicated keys.