Does anyone have the courage to perform a similar inspection on the Cloudflare homepage like the author did? On my M4 Mac mini, Safari lagged with single-digit frames per second (FPS), which scared me so much that I had to close the page as quickly as possible.
I also think OAuth could be used to better serve AX in the age of agent, but before the whole industry find the PMF, shall we not leave the humans (us) behind? Thus I made one for breaking the grip of big IdPs and offer a more secure and easier authentication solutions for humans [1].
You can find its dogfooding demo on the Show HN [2].
Not in detailed setup yet (as you could tell by spotting the 'PoC' in the domain), but you could try following the mock wizard on the build page (click the build button at the top) and go through the user flow.
I want to have it up and running ASAP so that people with experience in the related field can code themselves against the site right away or create a design audit from the outline.
accdoo.app is a Web App / PWA that help you to crunch some numbers:
arr.map(BigInt).reduce((a, b) => (a * b) ** 2n)
The same operation can be performed on any off-the-shelf calculator (or in mind), but this one comes in handy for large numbers without losing its precisions, up to 100,000 digits on Web, 1,000,000 in CLI, configurable from API (npm:accdoo).
Aside from the spirit of xkcd/936, it is widely applicable (does not require a dictionary nor an ANSI keyboard) and can be used for things like door locks, vaults, pins, passcodes, entropy seeding, or even root password for password managers (yes, all numeric is fine), etc.
Now back to Pi, it is an infinite data source and constant across the universe (base-10), figured would be great to have it chopped freely and then mixed into the calculations above. The Pi is produced on-the-fly, using JavaScript native BigInt and Chudnovsky Algorithm ([wiki]), the code was taken from one of the examples in the QuickJS project ([quickjs/pi], [pi_bigint.js]).
The syntax for cutting is the same as in the manual ([accdoo.app/about]):
pi#6 // take 6 digits of Pi (314_159)
pi#6#3 // take 6 digits of Pi but drop 3 beforehand (159_265)
pi#1#40000 // take one digit at 40,000th
This is the second Show HN post as its major feature bump, here's the link to its first intro 10 days ago ([39115559]) and a previous sideways on Ask HN 8 days ago ([39138957]).
I've being building something have similar functionality recently, thus have the underneath tech stacks in mind the moment I saw the title, (webcrypto: ecdhe, kdf, aes/gcm), further glance into the source code seems legit to me.
My only nitpick is for service like this, the shared private key shall be short lived one time using, storing into localStorage might potentially be a foot-gun with low ROI tho.