Max Nowack maxnowack

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

So you want to write a sync system for a web app with offline and realtime support? Good luck. You might find the following resources useful.

Overview articles

Database in a browser, a spec (Stepan Parunashvili)

What problem are we trying to solve with a sync system?
The web of tomorrow (Nikita Prokopov)

Experimental Safe JavaScript Navigation

Implemented using ES6 Proxies and Symbols

The purpose of this function is to provide a way to avoid deep nested conditionals when traversing a hierarchy of objects. Some languages use an operator such as '?.' to perform this capability. This is sometimes called safe navigation or null conditional operators.

You can somewhat think of this as how a xpath select works. If any nodes along the path are not found, your result is simply not found without throwing an exception and without needing to check each individual node to see if it exists.

Suggestions for improvements welcome!

Deploying to Meteor with Codeship.io

Project structure

You'll need to use a subdirectory within your git repo for the Meteor project. This allows you to clone Meteor into your repo without it trying to deploy itself. If you find a better way, please let me know.

Provide the name of the subdirectory to the deploy script with the SUBDIRECTORY environment variable.

	anchors:
	tf_init: &tf_init \|
	terraform init -lock=false \
	-backend-config="resource_group_name=terraform" \
	-backend-config="key=${{ env.TF_BACKEND_KEY }}" \
	-backend-config="access_key=${{ secrets.TF_BACKEND_ACCESS_KEY }}" \
	-backend-config="storage_account_name=${{ secrets.TF_BACKEND_SA }}"

	setup_backend_key: &setup_backend_key "githubdeployment.${{ github.event.inputs.environment }}.aks_setup.terraform.tfstate"
	configure_backend_key: &configure_backend_key "githubdeployment.${{ github.event.inputs.environment }}.aks_configure.terraform.tfstate"

	func FirstFrame(path string, data []byte) (*bufio.Reader, error) {
	cmd := exec.Command(path,
	"-i", "-", // read from stdin
	"-vframes", fmt.Sprint(1), // frame
	"-s", fmt.Sprintf("%dx%d", 640, 360), // size
	"-q:v", fmt.Sprint(2), // quality
	"-f", "singlejpeg", // jpeg binary
	"-", // read from stdout
	)
	// stdin read

	#cloud-config
	# vim: syntax=yaml
	#

	# The current version of cloud-init in the Hypriot rpi-64 is 0.7.9
	# When dealing with cloud-init, it is SUPER important to know the version
	# I have wasted many hours creating servers to find out the module I was trying to use wasn't in the cloud-init version I had
	# Documentation: http://cloudinit.readthedocs.io/en/0.7.9/index.html

	# Set your hostname here, the manage_etc_hosts will update the hosts file entries as well

	import mobx from "mobx"
	import store from "store"

	export default function(_this) {
	let firstRun = true

	// will run on change
	mobx.autorun(() => {
	// on load check if there's an existing store on localStorage and extend the store
	if (firstRun) {

	// Code based on
	// https://github.com/adafruit/DHT-sensor-library/blob/master/examples/DHTtester/DHTtester.ino
	// https://gist.github.com/igrr/7f7e7973366fc01d6393
	// https://github.com/iot-playground/Arduino/blob/master/ESP8266ArduinoIDE/DS18B20_temperature_sensor/DS18B20_temperature_sensor.ino

	// esp8266 + dht22 + mqtt

	#include "DHT.h"
	#include <PubSubClient.h>
	#include <ESP8266WiFi.h>


	set duetApps to {"Mail", "HipChat", "Console", "iTerm"}
	set laptopApps to {"Safari", "Google Chrome", "Tower"}
	set topApps to {"Sublime"}


	-- toggle full screen
	on toggleFullScreen()
	set isFullScreenAfter to false
	tell application "System Events"