Otto Bretz ottob

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Moved to https://jcs.org/notaweblog/2016/08/26/openbsd_chromebook/

Can't share the complete code because the app's closed source and still in stealth mode, but here's how I'm using React Router and Redux in a large app with server rendering and code splitting on routes.

Server

Wildcard Express route configures a Redux store for each request and makes an addReducers() callback available to the getComponents() method of each React Router route. Each route is responsible for adding any Redux reducers it needs when it's loaded. (This isn't really necessary on the

**
NEW VERSION (APPLE MUSIC FESTIVAL 2015 ALSO) & UPDATE HERE -> https://github.com/tdragonite/iTunesFestivalDownloader
** iTunes Festival Show Downloader - London 2014

Find the day of the show of the artist you want to download. Look at: http://www.itunesfestival.com
Give execution permission to the script: chmod 777 itunes-festival.sh
Launch the script: ./itunes-festival.sh day artist <br > Please, remember: NO SPACE IN THE ARTIST NAME!
F.e: Tony Bennett = tonybennett, The Script = thescript. Thanks! <br > Examples: ./itunes-festival.sh 06 tonybennett <br > ./itunes-festival.sh 15 thescript <br >
Have fun!
Additional note:

	// sub1 receives one message at a time from a subscription.
	package main

	import (
	"context"
	"flag"
	"log"
	"math/rand"
	"time"

	# In order for gpg to find gpg-agent, gpg-agent must be running, and there must be an env
	# variable pointing GPG to the gpg-agent socket. This little script, which must be sourced
	# in your shell's init script (ie, .bash_profile, .zshrc, whatever), will either start
	# gpg-agent or set up the GPG_AGENT_INFO variable if it's already running.

	# Add the following to your shell init to set up gpg-agent automatically for every shell
	if [ -f ~/.gnupg/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
	source ~/.gnupg/.gpg-agent-info
	export GPG_AGENT_INFO
	else

	var gulp = require('gulp');
	var browserify = require('gulp-browserify');
	var concat = require('gulp-concat');
	var styl = require('gulp-styl');
	var refresh = require('gulp-livereload');
	var lr = require('tiny-lr');
	var server = lr();

	var paths = {
	js: 'src/*/.js',

	<html>
	<body>

	<h1 data-localize="{{page.id}}.title">{{page.title}}</h1>

	<div data-localize="{{page.id}}.body">
	{{content}}
	</div>

	<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.0/jquery.min.js"></script>

	package postgres

	import (
	"database/sql"
	"database/sql/driver"
	"fmt"
	"github.com/lib/pq"
	"strings"
	)

	#################
	#### MODULES ####
	#################

	$ModLoad imuxsock # provides support for local system logging
	$ModLoad imfile

	###########################
	#### GLOBAL DIRECTIVES ####
	###########################