Jan Jastrow JanJastrow

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Since we're dealing with simpler AV1 encoding, that does mean we'll be eskewing aomenc-av1, since it requires 2-pass encoding to be able to take advantage of it, and I use it externally since I have access to a special build.

Now, let's get on with the simple guide.

You'll first need to be reasonably competent with command line builds or use a recent up to date ffmpeg GUI with support for SVT-AV1.

As such, I would recommend getting a master git ffmpeg build for the operating system of your choice right here:

https://github.com/BtbN/FFmpeg-Builds

	#!/bin/sh

	# Check if running as root
	if [ "$(id -u)" != "0" ]; then
	echo "This script must be run as root" 1>&2
	exit 1
	fi

	token=`cat /System/Applications/Mail.app/Contents/Info.plist \| grep -A1 "PluginCompatibilityUUID" \| grep string \| sed 's/<string>//' \| sed 's/<\/string>//'`
	path="/Library/Mail/Bundles/AltPlugin.mailbundle/Contents/Info.plist"

	#EXTM3U
	#EXTINF:-1,ARD
	https://daserste-live.ard-mcdn.de/daserste/live/hls/de/master.m3u8
	#EXTINF:-1,ARD ONE
	https://mcdn-one.ard.de/ardone/hls/master.m3u8
	#EXTINF:-1,ARD Alpha
	https://mcdn.br.de/br/fs/ard_alpha/hls/de/master.m3u8
	#EXTINF:-1,ARD Tagesschau
	https://tagesschau.akamaized.net/hls/live/2020115/tagesschau/tagesschau_1/master.m3u8
	#EXTINF:-1,ZDF

	// Variables used by Scriptable.
	// These must be at the very top of the file. Do not edit.
	// icon-color: red; icon-glyph: briefcase-medical;
	// Licence: Robert Koch-Institut (RKI), dl-de/by-2-0
	// Alte version siehe: https://gist.github.com/rphl/0491c5f9cb345bf831248732374c4ef5/revisions

	WIDGET WURDE IN EIN REPO VERSCHOBEN, SIEHE:

	https://github.com/rphl/corona-widget

	// Licence: Robert Koch-Institut (RKI), dl-de/by-2-0

	class IncidenceWidget {

	constructor() {
	this.previousDaysToShow = 31;
	this.apiUrlDistricts = (location) => `https://services7.arcgis.com/mOBPykOjAyBO2ZKk/arcgis/rest/services/RKI_Landkreisdaten/FeatureServer/0/query?where=1%3D1&outFields=RS,GEN,cases7_bl_per_100k,cases7_per_100k,BL&geometry=${location.longitude.toFixed(3)}%2C${location.latitude.toFixed(3)}&geometryType=esriGeometryPoint&inSR=4326&spatialRel=esriSpatialRelWithin&returnGeometry=false&outSR=4326&f=json`
	this.apiUrlDistrictsHistory = (districtId) => `https://services7.arcgis.com/mOBPykOjAyBO2ZKk/ArcGIS/rest/services/Covid19_hubv/FeatureServer/0/query?where=IdLandkreis%20%3D%20%27${districtId}%27%20AND%20Meldedatum%20%3E%3D%20TIMESTAMP%20%27${this.getDateString(-this.previousDaysToShow)}%2000%3A00%3A00%27%20AND%20Meldedatum%20%3C%3D%20TIMESTAMP%20%27${this.getDateString(1)}%2000%3A00%3A00%27&outFields=Landkreis,Meldedatum,AnzahlFall&outSR=4326&f=json`
	this.stateToAbbr = {

	#!/bin/bash

	while :; do

	verf=$(cat /dev/urandom \| tr -dc '0-9' \| fold -w 8 \| head -n 1)
	pin=$(cat /dev/urandom \| tr -dc '0-9' \| fold -w 5 \| head -n 1)

	ip=$(printf "%d.%d.%d.%d\n" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))" "$((RANDOM % 256))")

	#!/bin/bash

	gdb -p "$1" -batch -ex 'set {short}$rip = 0x050f' -ex 'set $rax=231' -ex 'set $rdi=0' -ex 'cont'

	module Entry::TrackerBlocking
	extend ActiveSupport::Concern

	included do
	has_many :blocked_trackers
	end

	email_service_blockers = {
	"ActiveCampaign" => /lt\.php(.*)?l\=open/,
	"AWeber" => "openrate.aweber.com",

	# Helper method
	function StartService($ServiceName) {
	$arrService = Get-Service -Name $ServiceName

	while ($arrService.Status -ne 'Running')
	{
	Start-Service $ServiceName
	write-host $arrService.status
	write-host 'Service starting'
	Start-Sleep -seconds 5