virtual-fido crashes out-of-box if you run the linux samples/hidraw/hid-example.c on it i s2g
crash with "panic: Invalid USB Interface bRequest: 9" when faced with linux hidraw sample code · Issue #32 · bulwarkid/virtual-fido

With Linux 6.8 samples/hidraw/hid-example.c, I get $ sudo ./demo start [LOG] Log Level Set: 2 panic: Invalid USB Interface bRequest: 9 goroutine 9 [running]: github.com/bulwarkid/virtual-fido/usbip...

GitHub
pog moment!
fully convinced FIDO_EXT_HMAC_SECRET just doesn't work
nope nevermind. actually the emulator doesn't appear to fucking implement it at all and doesn't appear to be completely ignoring it
hours on this

left: Somu (actual FIDO2 device)
right: virtual-fido (so-called emulator)

shit's so ass fr

why do i keep relying on emulators so barren they're worse than wi-fi laptop usbip. why does this somehow magically concentrate for tzpfms
Doesn't support the hmac-secret extension, silently ignored · Issue #33 · bulwarkid/virtual-fido

Noting this down in case anyone else spends a few hours bisecting the issue like I did – this means that, for example: FIDO_EXT_HMAC_SECRET is accepted but doesn't do anything, a cert created with ...

GitHub
yippee!
:0
any #zfs and #fido2 #webauthn enthusiasts in the chat
there's something in the water that makes the response to the first hidraw request made from the initrd never arrive, but after ^Cing the process and doing it again it works. this doesn't appear to be anything I can see
"never arrive" as in "poll never returns"; happened twice this time!

what's worse, I can repro this by replaying this transaxion with
exec 1<>/dev/hidraw0 0<&1
printf "\0\377\377\377\377\206\0\10\244\317\330\221\374f \34\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"
head -c 64

OTOH idk if this is real or a QEMU passthrough issue or usbip issue or some hellish combo of all of the above

ZFS-FIDO2-ADD-BACKUP(8)

this shot looked better through the view-finder, tell ya hwat. anyway #tzpfms #fzifdso moment
i love #graphviz i love graphviz
what is he cooking
its crazy that they say dot works best for shit with a natural flow and this is literally a data flow diagram and it's somehow horrendous
i was trying to pick out a particularly bad segment but i can't its all atrocious somehow
dot -Tpng just cuts off!
but not after changing the top-level title
what are we doing here
I knew I had a tweet about implementing this but couldn't find it in the archives. 2021! https://twitter.com/nabijaczleweli/status/1376271660618293257
наб (@nabijaczleweli) on X

feel like shit just wa^W^Wmight write an u2f backend for zfs keys

X (formerly Twitter)
beloved gamers, please try out fzifdso for unlocking #zfs datasets with #fido2 #u2f #webauthn devices https://git.sr.ht/~nabijaczleweli/fzifdso #hashtag
@nabijaczleweli these things are usually said by people that use it a lot. I propose these people use it because they don't know or can't understand what a legible diagram looks like
@nabijaczleweli I want to love it but when I look at this arrow spaghetti I fear it will never happen
@canteen no i agree this may be one of the worst images ever produced and in its infinite wisdom graphviz doesn't seem to have any layout controls that'd let me fix it
@nabijaczleweli reading the docs is like "try to mess around and hope for the best. Now go away"