U2F and Firefox on Funtoo

U2F is pretty neat. It can be used locally on a machine for authentication and for two factor authentication on websites. There are even plugins for using it on WordPress powered websites. At the time this article was written, Firefox does not enable U2F by default. Though, that looks to be changing with Firefox 68.

Enable U2F in Firefox

Enabling U2F in Firefox is fairly straightforward. In the URL bar enter: about:config. Then search for u2f. There should be an entry: security.webauth.u2f, set it to true.

Install pam_u2f

However, simply enabling U2F in Firefox is not enough for a U2F device to work. To get everything working, pam_u2f needs to be installed. On Funtoo, this is quite simple:

emerge -av pam_u2f

After installing pam_u2f, Firefox should now be able to query your U2F key.

Breadcrumb NavXT 6.3 and Premium Extensions

Over the past few weeks, various Breadcrumb NavXT extensions have been updated in preparation for Breadcrumb NavXT 6.3. Today, the last batch of extension updates are being released. The following extensions are now ready for Breadcrumb NavXT 6.3:

Breadcrumb NavXT 6.3 is not scheduled for release for another few weeks. However, it is recommended to update any extension plugins in use before updating Breadcrumb NavXT.

Users with valid and activated license keys should receive an update notification within the WordPress dashboard and be able to use the update mechanism to update (just like with any plugin in the WordPress.org repository).

Breadcrumb NavXT uManager 1.2.0

Announcing the immediate availability of Breadcrumb NavXT uManager 1.2.0. This version introduces two new features and offers improved compatibility with Breadcrumb NavXT 6.3.0.

On the new feature front, a breadcrumb trail module for Divi is now included. Also new in 1.2.0 is the ability to use multiple taxonomies in a breadcrumb trail for a given post type. Additionally, the order these taxonomies appear in the breadcrumb trail can be specified in the Breadcrumb NavXT settings page.


Users with valid and activated license keys should receive an update notification within the WordPress dashboard and be able to use the update mechanism to update (just like with any plugin in the WordPress.org repository).

Breadcrumb NavXT Multidimension Extensions 2.5.3

Announcing the immediate availability of Breadcrumb NavXT Multidimension Extensions 2.5.3. This version improves compatibility with the upcoming Breadcrumb NavXT 6.3. Changes in Breadcrumb NavXT 6.3’s setting page results in older versions of Breadcrumb NavXT Multidimension Extensions producing a blank settings tab.

You can grab Breadcrumb NavXT Multidimension Extensions from the WordPress.org plugin repository.

XDM/SDDM Slow Startup Followup

As reference previously, recently, the XPS 15 9530 had an issue in startup where the login prompt in the shell was available but XDM/SDDM did not start until several key presses later. Waiting for it to start was a futile effort—once waited over 30 minutes to no avail. A full system reinstall did not help either.

Digging into the dmesg output revealed something interesting:

[83.413293] random: crng init done
[83.413299] random: 7 urandom warning(s) missed due to ratelimiting

It was taking over a minute and a half for random to generate enough entropy. And, this was with the keyboard getting mashed! Apparently, this is a relatively common issue to run into.

Since the XPS 15 9530 has a Haswell core CPU with RDRAND instruction support, an easy way around this is to enable “Trust CPU Vendor” in the kernel config:

CONFIG_RANDOM_TRUST_CPU=y

Now, this is not without consequence. There is concern that Intel’s RDRAND implementation was inappropriately influenced by external parties. An alternative workaround is to install haveged. This has its own issues—it is a software solution to inflate entropy. Finally, on the Gentoo forums, the recommendation is to continue to mash the keyboard until userland applications are updated with to more appropriate entropy requirements.

Tagged:
Updated: