ecesena

Joined 15 years ago

Karma
2,107
Submissions
1,763
Member since
Jan 15
SoloKeys: open security keys - https://solokeys.com

Firedancer: second solana validator - https://github.com/firedancer-io/firedancer

https://x.com/0x0ece ec [] solokeys.com

View on Hacker News

Recent submissions

Comment · 11 days ago
I have a tmux split in 4. Personally I just use claude, but in any 4th you can run whatever you pref. Each agent has its own workspace (run in a diff dir), but they all share memory, skills, and can of course read each other work. Four is nothing special, just easy to still read in a 13” screen, easy to switch each pane to full screen and so on.

Edit: forgot the ssh part. Same setup on my mac, on my server, at work. So my UX is pretty much always the same. Most of the time it’s via ssh, yes, only rarely I use my mac.

Comment · 1 month ago
Ops, I may have misinterpreted. I read it as take a passkey and copy/store it inside a hw sec key. Thanks for clarifying!
Comment · 1 month ago
> By design, you cannot create a backup of passkeys on a hardware key

In fact, I think it's technically possible. But it's true, as of today I don't think anybody supports it.

I was experimenting on solokeys with ios, in principle we could backup Passwords (the ios/mac app) into a solo key, space permitting, including passkeys, regular passwords and totp (not wifi passwords). I believe the same is for Android, but haven't tested yet. This is all experiments I've been doing on my own, there's nothing ready to be released.

Comment · 1 month ago
A better solution (than Shamir secret sharing) are threshold signatures.

The difference is that with Shamir you have to reconstruct the private key in one place before you can sign. With threshold signatures multiple servers can collaboratively sign without ever reconstructing the private key in a single place.

For chains like Solana, Aptos, SUI that use ed25519 (schnorr signature), there's a pretty clean solution called FROST.

For Bitcoin and Ethereum/EVMs that use ECDSA it's a bit trickier but there's been a lot of research recently, so there are solutions.

Comment · 1 month ago
google drive where you don’t see the files, but you see the people who you shared to, and if you click you can see which files.
Comment · 1 month ago
I do not have experience with Copperhead, but I made 2 PCBs with Claude. He made a py script that generates Kicad sources, I ended up generating all files (in particular schematics and PCB) from a shared netlist, and use Kicad cli to validate and generate gerbers.

I manufactured both PCBs via PCBWay (Claude also red all the specs and configured the constraints accordingly) and both work. I'm pretty impressed, especially because I've never done a PCB myself and didn't know I could.

What I was doing manually, co-working with Claude, was placing and routing (I was doing those via Kicad, then saving, then Claude was re-importing my work in his py files).

Comment · 1 month ago
I did 2 pcbs recently with claude (opus 4.8 and 5). One was simple, the other pretty complex. I’ll open source them at some point.

I did manual routing myself, including most positioning, but claude was super helpful in identifying components, reviewing, etc. It was truly a collaboration.

These are my first pcbs ever, I don’t have any edu at all at making pcbs and was really excited to receive working prototypes. The other pretty amazing thing is that I have py scripts that generate the all the kicad files, as a human I wou look d have never done that (for the cost of building the py files) but I find it pretty neat.

Comment · 2 months ago
One per device seems a good rule of thumb. If you have 2 laptops, each gets a diff ssh key, and then you config both in github/server(s).

It's slightly more painful to setup, but you get more flexibility later on in case you loose one key you have the other, and in case you need to cancel just one you can.

If you use hardware security keys, you get one per device naturally.

Comment · 2 months ago
I believe the main one right now is digital identities. https://www.w3.org/reports/identity-web-impact/

Classic use cases would be like 1) show that you have a national id (like a passport) without revealing which one, 2) show that you are >= 18 without revealing your date of birth. More generally, assuming you have digital credentials with metadata, pretty much any statement can be proved in ZK (relatively efficiently, especially if the digital id is designed to be ZK friendly).

Comment · 2 months ago
Nowadays you can run arbitrary verified computation at 100-300MHz using so-called zkvm. State of the art are probably risczero and succinct.

Practically speaking, write any program you want, compile it to riscv, imagine to run it on a pretty fast microcontroller, and in addition to the result you get a proof of correct execution.

I’d say it’s pretty practical, all major unlocks happened like in the past 3-4y and of course there’s a ton of research still happening.

This is the slow/generic version. For specific problems (aka dedicated circuits) it can be much faster.

Comment · 2 months ago
There’s FIDO CXF/CXP: https://fidoalliance.org/specs/cx/cxf-v1.0-ps-errata-2026030...

To my understanding both Apple Passwords and the Android equivalent allow you to export passkeys to a different app (password manager), but I haven’t tried it yet.

If anyone has direct experience I appreciate to know how it was.

Comment · 2 months ago
Comment · 3 months ago
Comment · 3 months ago
no, for now just multiple copies of the same repo. typically the agents work on independent things.

but I will try. the limit tbh is me and my ability to keep up with what’s happening. I work mainly on security/cryptography so I’m expected to audit the results of my work very carefully.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton