Profile cover photo
Profile photo
Kyle Hawkins
60 followers
60 followers
About
Kyle's posts

Post has attachment

Post has attachment

Post has attachment
I just got my reservation from @Aviate http://bit.ly/aviatepass Sign up to simplify your phone http://getaviate.com #flywithus #getaviate

Post has attachment
Now I can be cool like +Jason Weatherly 
Photo

Post has shared content
This is how it's done.

Thanks +Koushik Dutta 
Technical Details on +CyanogenMod Device Finder

The new +CyanogenMod Device Finding service creates a secure connection between your browser (javascript) and your phone.

The server never has your password. Your authentication is a derived password.
A public key is generated in the browser, and hmac'd with the actual password (unavailable to the server).
On a device find request, the Android device receives this public key, and validates it is authentic, as the Android device also has the same, underived/original, password.
The Android device sends back an encrypted symmetric key using the public key.
The server can not decrypt the symmetric key, as it does not have the private key.
The browser receives the encrypted payload, and decrypts the symmetric key.

The browser and phone at this point have a secure communication channel, and both sides have authenticated each other. The server is not capable of listening in. It merely provides a transport.

The browser then requests the device location (or requests a wipe) through this secure channel.

The result? As seen in firebug below, the data sent through the server is completely opaque.

This is how device finding should be done. You can not trust that a service will never be compromised. You can never trust that a service will not be subject to the will of a government request.

You can only trust that your data was secure from the service itself.

The code is up on github, and a review from outside parties is highly encouraged.
Photo

Post has attachment
Photo

Post has shared content
Glad it's Friday....I'm beat!   #happyfriday  
Animated Photo

Post has attachment
Finally got my #archlinux system totally set up! Thanks +Colin Azzam for all the advice and support.
Photo

What AUR helper do you use and why?

I've never even looked at them before, but if one could handle updates well, that'd be pretty nice.

Post has attachment
I don't know what to say except thanks to everyone who got me here. 
Photo
Wait while more posts are being loaded