RubyGems
python-vipaccess
| RubyGems | python-vipaccess | |
|---|---|---|
| 25 | 52 | |
| 2,295 | 766 | |
| 0.2% | - | |
| 9.8 | 4.2 | |
| 3 days ago | 5 days ago | |
| Ruby | Python | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
RubyGems
-
Phlex is the ruby way to build your views
However, let's examine a typical partial, such as the one from the . rubygems.org search show page
- Chrome considers gems to be dangerous?
- Rubygems.org Hacked?
- Rubygems.org marked by Chrome as an “unsafe site”
-
OOP vs. services for organizing business logic: is there a third way?
github.com/rubygems/rubygems.org (26k lines): Where Ruby gems are hosted.
-
RubyGems now requires MFA for owners of top gems
If anyone is looking to do some open source contributions on a mature, production Ruby on Rails site, I highly recommend contributing to the rubygems.org project. The code is extremely clean and the repo is very, very well run.
https://github.com/rubygems/rubygems.org
- Rubygems packages found carrying out dependency confusion research
-
Making popular Ruby packages more secure
RubyGems does have gem signing, but it's not widely used.
There's a proposal for a new "one button" approach using sigstore[0].
Other ecosystems are also looking at sigstore too, and a lot of us are cooperating in the OpenSSF Securing Software Repos WG [1]. Package signing is a regular topic of discussion and there are various efforts underway.
Disclosure: I am involved with both of these.
[0] https://github.com/rubygems/rubygems.org/pull/2944
[1] https://github.com/ossf/wg-securing-software-repos
- Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so.
python-vipaccess
-
Any update on PassKey FIDO2 login support?
Yes, but it’s a minor hassle. I do it for every VIP Access site though. https://github.com/dlenski/python-vipaccess
-
TOTP Authentication with Free Software
My apologies, I guess I read these lines wrong.
https://github.com/dlenski/python-vipaccess/blob/cc4366f7bce...
- Did anyone else get "Important update about your login experience" e-mail?
- My school is forcing its students to download a proprietary 2FA app. This is ridiculous.
-
Brokerages need to offer better MFA token options
On fidelity you can use the symantec vip option, but use a normal TOTP application (I use Keepass + yubikey). You can generate the SYM number using this https://github.com/dlenski/python-vipaccess
-
Protip: USAA 2FA / "cybercode" sucks. Here's a workaround to use any auth app that makes it awesome.
The project and more info and instructions can be found at this github repo: https://github.com/dlenski/python-vipaccess
- How to have TOTP copied after username only?
-
Does it matter if all accounts are with same institution?
I recommend putting everything behind software two factor. This option is only available via Symantec VIP access. If you have your own preferred 2fa management software there are ways to extract the Symantec VIP access. See https://github.com/dlenski/python-vipaccess. Definitely vet the project before using it, which should be easy since its open source.
-
Feature request: when will we be able to use Microsoft Authenticator for 2FA?
You simply need to enroll in with https://github.com/dlenski/python-vipaccess and then you can import the 2FA secret in literally any 2FA app.
-
Still the same terrible 2FA for E-trade? Why? It's not that hard to do it right.
You can use https://github.com/dlenski/python-vipaccess to generate standard 2FA tokens you can add to Google Authenticator, etc.
What are some alternatives?
Bundler
keepassxc - KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
gemdiff - Find source repositories for ruby gems. Open, compare, and update outdated gem versions
Strongbox - A KeePass/Password Safe Client for iOS and OS X
Gem in a Box - Really simple rubygem hosting
standards - Work space for data standards development in Australia under the Consumer Data Right regime
gemstash - A RubyGems.org cache and private gem server
full-stack-fastapi-postgresql - Full stack, modern web application generator. Using FastAPI, PostgreSQL as database, Nuxt3, Docker, automatic HTTPS and more.
passwordless - 🗝 Authentication for your Rails app without the icky-ness of passwords
smart-id-documentation
SharpZipLib - #ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.
Aegis - A free, secure and open source app for Android to manage your 2-step verification tokens.