From russell at coker.com.au Fri Jan 12 09:18:45 2024 From: russell at coker.com.au (Russell Coker) Date: Fri, 12 Jan 2024 09:18:45 +1100 Subject: [Flounder] 20th Jan FIDO hack day Message-ID: <1996977.usQuhbGJ8B@cupcakke> https://flounder.linux.org.au/events/flounder-jan-2024-fido/ https://en.wikipedia.org/wiki/FIDO_Alliance#FIDO2 January event, FIDO Hack day. FIDO2 is a system for strong authentication for the web. We should all want to have this running in a distributed fashion so let?s learn how to do it. Meeting will be at http://b.coker.com.au. No need to register just click on the link on the day. Having an existing test web server would be good to have in advance of this, but not required. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From russell at coker.com.au Fri Jan 12 14:05:03 2024 From: russell at coker.com.au (Russell Coker) Date: Fri, 12 Jan 2024 14:05:03 +1100 Subject: [Flounder] 20th Jan FIDO hack day In-Reply-To: <1996977.usQuhbGJ8B@cupcakke> References: <1996977.usQuhbGJ8B@cupcakke> Message-ID: <2203425.Icojqenx9y@cupcakke> https://flounder.linux.org.au/events/flounder-jan-2024-fido-hack/ I just changed this to a 4PM start because of the LA AGM. That means a 8PM (10PM Auckland time) end, but I figure that people in NZ can have a late night on occasion or just leave the meeting early. People often leave the hack meetings after about 3 hours anyway. On Friday, 12 January 2024 09:18:45 AEDT Russell Coker wrote: > https://flounder.linux.org.au/events/flounder-jan-2024-fido/ > > https://en.wikipedia.org/wiki/FIDO_Alliance#FIDO2 > January event, FIDO Hack day. > > FIDO2 is a system for strong authentication for the web. We should all want > to have this running in a distributed fashion so let?s learn how to do it. > > Meeting will be at http://b.coker.com.au. No need to register just click on > the link on the day. > > Having an existing test web server would be good to have in advance of this, > but not required. Meeting officially opens at 4pm Melbourne time (05:00UTC) on the 20th of Jan. Later than usual start time because of the Linux Australia AGM. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From NZOSS at etelligence.info Fri Jan 12 14:57:33 2024 From: NZOSS at etelligence.info (DL Neil) Date: Fri, 12 Jan 2024 16:57:33 +1300 Subject: [Flounder] 20th Jan FIDO hack day In-Reply-To: <2203425.Icojqenx9y@cupcakke> References: <1996977.usQuhbGJ8B@cupcakke> <2203425.Icojqenx9y@cupcakke> Message-ID: <38623a77-a19d-4e3d-b0c9-7b42bb54dcfc@etelligence.info> On 12/01/24 16:05, Russell Coker via Flounder wrote: > https://flounder.linux.org.au/events/flounder-jan-2024-fido-hack/ > I just changed this to a 4PM start because of the LA AGM. That means a 8PM > (10PM Auckland time) end, but I figure that people in NZ can have a late night Hey, you're playing dangerously - some of us (desperately) need our beauty sleep - OTOH, you're the one who sees me (all my mirrors have somehow broken)! -- Regards =dn From NZLUG at etelligence.info Sun Jan 14 12:59:40 2024 From: NZLUG at etelligence.info (DL Neil) Date: Sun, 14 Jan 2024 14:59:40 +1300 Subject: [Flounder] 20th Jan FIDO hack day In-Reply-To: <2203425.Icojqenx9y@cupcakke> References: <1996977.usQuhbGJ8B@cupcakke> <2203425.Icojqenx9y@cupcakke> Message-ID: <5250229c-9730-41ea-a8ff-4b7df2130101@etelligence.info> On 12/01/24 16:05, Russell Coker via Flounder wrote: > https://flounder.linux.org.au/events/flounder-jan-2024-fido-hack/ Will this be concentrating on the server, the client-end, or looking at both? -- Regards =dn From yifei at zhan.science Sun Jan 14 15:34:11 2024 From: yifei at zhan.science (yifei at zhan.science) Date: Sun, 14 Jan 2024 15:34:11 +1100 Subject: [Flounder] 20th Jan FIDO hack day In-Reply-To: <5250229c-9730-41ea-a8ff-4b7df2130101@etelligence.info> References: <1996977.usQuhbGJ8B@cupcakke> <2203425.Icojqenx9y@cupcakke> <5250229c-9730-41ea-a8ff-4b7df2130101@etelligence.info> Message-ID: <7620781.EvYhyI6sBW@portal> On Sunday, January 14, 2024 12:59:40 PM AEDT DL Neil via Flounder wrote: > On 12/01/24 16:05, Russell Coker via Flounder wrote: > > https://flounder.linux.org.au/events/flounder-jan-2024-fido-hack/ > > Will this be concentrating on the server, the client-end, or looking at > both? Likely both, I assume we would all hack on what interests each of us and share out what we figure out/find interesting ;) From russell at coker.com.au Sat Jan 20 17:44:21 2024 From: russell at coker.com.au (Russell Coker) Date: Sat, 20 Jan 2024 17:44:21 +1100 Subject: [Flounder] FIDO2 meeting report Message-ID: <8366204.NyiUUSuA9g@xev> I was going to email the chat but the copy/paste operation failed. In future I'll paste the notes BEFORE ending the meeting. So I'll write stuff from memory. The Debian package fido2-tools allows talking to U2F devices (dongles for FIDO2) and I used it to talk to a Yubico device I got from work. https://webauthn.io/ https://webauthn.bin.coffee/ The above web sites test the WebauthN functionality of your browser and hardware. Chrome and the Yubikey work on Debian/Bookworm for me. https://www.yubico.com/products/security-key/ Yubikeys start at $25US which is reasonably affordable. https://www.crowdsupply.com/solokeys/somu#products https://tomu.im/somu.html The Somu is an open source hardware device which does this and costs $35. https://github.com/ellerh/softfido Softfido is a software emulation of Fido hardware. It is not in Debian but the Debian package softhsm provides the dependency for it. https://wiki.debian.org/Security/U2F The Debian U2F wiki page is worth reading. https://forums.debian.net/viewtopic.php?t=151442 People have got LUKS unlocking via Fido2 keys. https://mjg59.dreamwidth.org/66429.html Your LUKS key derivation function can be a weakness in your LUKS setup. This is separate from Fido2/TPM stuff. Everyone had fun and learned some things, so the meeting was a success even though we didn't get Fido2 emulation working. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From russell at coker.com.au Thu Jan 25 00:03:51 2024 From: russell at coker.com.au (Russell Coker) Date: Thu, 25 Jan 2024 00:03:51 +1100 Subject: [Flounder] Saturday Flounder meeting about Phones Message-ID: <3243972.AJdgDx1Vlc@cupcakke> https://flounder.linux.org.au/events/flounder-jan-2024-phone-discuss/ January event, Linux on phones discussion and Demo day. Yifei and Russell will discuss things that they have investigated and ideas for how to improve things. There will be a lecture part and a discussion part, input from people will be appreciated. Meeting will be at http://b.coker.com.au. No need to register just click on the link on the day. Meeting officially opens at 1pm Melbourne time (02:00UTC) on the 27th of Jan. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From NZLUG at etelligence.info Sun Jan 28 11:13:50 2024 From: NZLUG at etelligence.info (DL Neil) Date: Sun, 28 Jan 2024 13:13:50 +1300 Subject: [Flounder] Computer Monitors Message-ID: Only because monitors became a discussion topic during yesterday's meeting: 7 Unconventional Types of Computer Monitors BY BEMFICA DE OLIVA PUBLISHED 1 DAY AGO https://www.howtogeek.com/unconventional-types-of-computer-monitors/ -- Regards =dn From russell at coker.com.au Mon Jan 29 09:45:59 2024 From: russell at coker.com.au (Russell Coker) Date: Mon, 29 Jan 2024 09:45:59 +1100 Subject: [Flounder] Computer Monitors In-Reply-To: References: Message-ID: <2211345.1BCLMh4Saa@cupcakke> On Sunday, 28 January 2024 11:13:50 AEDT DL Neil via Flounder wrote: > Only because monitors became a discussion topic during yesterday's meeting: > > 7 Unconventional Types of Computer Monitors > BY > BEMFICA DE OLIVA > PUBLISHED 1 DAY AGO > https://www.howtogeek.com/unconventional-types-of-computer-monitors/ http://tinyurl.com/yt8rhf4d 5120*2880 monitors are coming down in price, still ridiculously expensive. In the US they are under $1K but they don't post internationally, makes me wonder if I could get a 27" monitor in hand luggage... The cheapest 5120*2880 monitors are in second-hand Macs that are going cheap because of having Intel CPUs. I have idly considered buying an old Mac as an Xterm, $400 for a high resolution monitor. https://etbe.coker.com.au/2020/07/02/desklab-portable-usb-c-monitor/ Portable USB-C touch screens are another category of monitor, they are getting cheap nowadays. There are also ones with built in keyboard and batteryx - everything you need to transform your phone into a laptop! There are apparently "adult" sites with 8K content, so hopefully that will drive demand for 8K monitors and get the prices down. 8K should allow 64 Xterms on one screen!!! https://www.dell.com/en-au/shop/dell-ultrasharp-32-6k-monitor-u3224kb/apd/210-bhrp/monitors-monitor-accessories This is the best monitor for my needs with a listed price at the moment, 6144*3456 at 32" for $3600. Way out of my price range. https://www.pcgamer.com/tcl-touts-fully-concave-and-8k-oled-pc-monitors-using-new-low-cost-inkjet-panel-tech/ TCL claims to have affordable 8K monitors this year, but you need a Radeon RX 7000 to drive one unless you get a monitor that can divide the screen into 2 virtual screens and have 2*HDMI or DisplayPort cables. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From russell at coker.com.au Tue Jan 30 19:56:36 2024 From: russell at coker.com.au (Russell Coker) Date: Tue, 30 Jan 2024 19:56:36 +1100 Subject: [Flounder] Flounder Meeting Feb 3rd - CCC Watch Party Message-ID: <3274579.aeNJFYEL58@xev> https://flounder.linux.org.au/events/flounder-feb-2024-37c3-watch-party/ First February event, 37C3 Watch Party The 37th edition of the CCC is a conference about computer security [1]. They have videos of their lectures online, for this meeting we will watch lectures that are generally agreed to be interesting and then discuss them. Feel free to review the list of lectures before the meeting to choose the ones you most want to watch and discuss! Meeting will be at http://b.coker.com.au. No need to register just click on the link on the day. Meeting officially opens at 1pm Melbourne time (02:00UTC) on the 27th of Jan. [1] https://media.ccc.de/c/37c3 -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ From russell at coker.com.au Tue Jan 30 23:03:21 2024 From: russell at coker.com.au (Russell Coker) Date: Tue, 30 Jan 2024 23:03:21 +1100 Subject: [Flounder] Flounder Meeting Feb 3rd - CCC Watch Party In-Reply-To: <3274579.aeNJFYEL58@xev> References: <3274579.aeNJFYEL58@xev> Message-ID: <10411417.nUPlyArG6x@xev> On Tuesday, 30 January 2024 19:56:36 AEDT Russell Coker wrote: > First February event, 37C3 Watch Party > > The 37th edition of the CCC is a conference about computer security [1]. > They have videos of their lectures online, for this meeting we will watch > lectures that are generally agreed to be interesting and then discuss them. > Feel free to review the list of lectures before the meeting to choose the > ones you most want to watch and discuss! > > Meeting will be at http://b.coker.com.au. No need to register just click on > the link on the day. > Meeting officially opens at 1pm Melbourne time (02:00UTC) on the 3rd of Feb. > > [1] https://media.ccc.de/c/37c3 https://flounder.linux.org.au/events/flounder-feb-2024-37c3-watch/ Sorry for the mistake, I had the wrong day in the body. I ficed that and gave it a new URL. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/