Robert J. chew-z

"What the heck is a Yubikey and why did I buy one?": A user guide

(EDIT: Besides Reddit, I've also put this up on Github Gist)

So while looking for information on security keys before getting one myself, I got very confused reading about all the different modes and advertised features of Yubikeys and other similar dongles. The official documentation tends to be surprisingly convoluted at times, weirdly organized and oddly shy about a few of the limitations of these keys (which I'm making a point of putting front and center). Now that I have one, I decided to write down everything I figured out in order to help myself (and hopefully some other people reading this) make sense of all this.

Since I'm partly writing these notes for myself, there might be some back and forth between "exp

Resources

Obfuscating Lua

I've had some fun ruining Python recently, but Python is what I use at work. I prefer to use other languages when I'm doing stuff for fun.

And obfuscation only really makes sense in fun and competition - given a suffeciently determined actor, your code will be reverse engineered. Unless you write it in Malboge.

For this particular experiment, I'll be using Lua 5.3. As I'll probably need to dive into some of the less portable functions to commit our atrocities, I can't guarantee it will run on other popular versions like Luajit or 5.1.

	###
	# SSH keys setup with Apple keychain
	###
	if [ -z "$SSH_AUTH_SOCK" ] && [ -z "$SSH_AGENT_PID" ]; then
	# If no SSH Agent is running, start one and load keys from Apple keychain
	eval `ssh-agent -s` &> /dev/null
	ssh-add --apple-load-keychain &> /dev/null
	else
	if [ -z "$(ssh-add -l \| grep SHA256)" ]; then
	# If agent is running but has no keys, load keys from Apple keychain

	-- Override mpv's default volume keybinds with decibel controls
	-- Put this file (dbvol.lua) in ~/.config/mpv/scripts/
	-- WARNING: positive gain values may cause clipping

	-- Author: Romain "Artefact2" Dal Maso <[email protected]>
	-- Released under the WTFPLv2

	function round(n)
	-- https://stackoverflow.com/a/58411671
	return n + (2^52 + 2^51) - (2^52 + 2^51)

	# This file is licensed under the terms of the MIT license https://opensource.org/license/mit
	# Copyright (c) 2021-2025 Marat Reymers

	## Golden config for golangci-lint v2.1.5
	#
	# This is the best config for golangci-lint based on my experience and opinion.
	# It is very strict, but not extremely strict.
	# Feel free to adapt it to suit your needs.
	# If this config helps you, please consider keeping a link to this file (see the next comment).

	-- autosave.lua
	--
	-- Periodically saves "watch later" data during playback, rather than only saving on quit.
	-- This lets you easily recover your position in the case of an ungraceful shutdown of mpv (crash, power failure, etc.).
	--
	-- You can configure the save period by creating a "lua-settings" directory inside your mpv configuration directory.
	-- Inside the "lua-settings" directory, create a file named "autosave.conf".
	-- The save period can be set like so:
	--
	-- save_period=60

	--New child with start with the current 'aid' and 'audio-device' of the parent
	-- non-Windows environments require the use of the 'socat' package
	local platform_is_windows = (package.config:sub(1, 1) == "\\")
	local options = require 'mp.options'
	local o = {
	pipe_template = platform_is_windows and "\\\\.\\pipe\\mpvDupedAudio" or "~/mpvDupedAudio", --windows format
	new_child_key = 'Ctrl+A', --Start a new child: 'Ctrl+Shift+a'
	cycle_child_control_key = 'Ctrl+Alt+A', --Cycle child control: 'Ctrl+Shift+Alt+a'
	cycle_child_aid_key = 'Ctrl+Alt+a', --Cycle 'aid' of child: 'Ctrl+Alt+a'
	child_increase_volume_key = 'Ctrl+Alt+WHEEL_UP', --Change volume of child: 'Ctrl+Alt+wheel'

	// ==UserScript==
	// @name Tinder Deblur
	// @namespace Violentmonkey Scripts
	// @match https://tinder.com/*
	// @grant none
	// @version 1.4
	// @author Tajnymag
	// @downloadURL https://raw.githubusercontent.com/tajnymag/tinder-deblur/main/tinder.user.js
	// @description Simple script using the official Tinder API to get clean photos of the users who liked you
	// ==/UserScript==

	export default () => {
	//* Determine whether or not the PWA has been installed. *//

	// Step 1: Check local storage
	let pwaInstalled = localStorage.getItem('pwaInstalled') === 'yes';

	// Step 2: Check if the display-mode is standalone. (Only permitted for PWAs.)
	if (!pwaInstalled && window.matchMedia('(display-mode: standalone)').matches) {
	localStorage.setItem('pwaInstalled', 'yes');
	pwaInstalled = true;