Moulick Aggarwal Moulick

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

ANSI Escape Sequences

Standard escape codes are prefixed with Escape:

Ctrl-Key: ^[
Octal: \033
Unicode: \u001b
Hexadecimal: \x1B
Decimal: 27

Hello, Diagrams!

GitHub recently added support for including Mermaid diagrams in Markdown files. The good news is that it works for AsciiDoc files as well. Here is an example:

sequenceDiagram
    participant Alice
    participant Bob

Hyperlinks (a.k.a. HTML-like anchors) in terminal emulators

[ Update 2020-05-31: I won't be maintaining this page or responding to comments anymore (except for perhaps a few exceptional occasions). ]

Most of the terminal emulators auto-detect when a URL appears onscreen and allow to conveniently open them (e.g. via Ctrl+click or Cmd+click, or the right click menu).

It was, however, not possible until now for arbitrary text to point to URLs, just as on webpages.

How to use Bitwarden CLI with macOS Touch ID

If you want to use Bitwarden CLI for ssh have a look at: How to use use Bitwarden CLI for SSH-Keys in macOS

Wirtten and tested on macOS Ventura

Configure Touch ID for the `sudo` command

To allow Touch ID on your Mac to authenticate you for sudo access instead of a password you need to do the following.

Keybase proof

I hereby claim:

I am moulick on github.
I am moulick (https://keybase.io/moulick) on keybase.
I have a public key ASBu2N3FFKIk2YxToJ3tegXJV08x45AeMfrXxJTD3Id9NAo

To claim this, I am signing this object:

	#!/usr/bin/env python3
	# /// script
	# dependencies = []
	# ///
	import sqlite3
	import json
	import os
	from pathlib import Path

	def get_mcp_disabled_tools():

	#!/usr/bin/env bash

	# This script was introduced to make aws-sso-cli compatible with GitHub Codespaces.
	# GitHub Codespaces defines a $BROWSER env var that handles opening urls.
	# https://github.com/synfinatic/aws-sso-cli/issues/816

	# If $BROWSER is not set then use 'open' on macos and 'xdg-open' on linux.
	if [[ -z ${BROWSER+x} ]]; then
	if [[ "$(uname)" == "Darwin" ]]; then
	BROWSER=open

	{
	"$ref": "#/definitions/VpcCni",
	"$schema": "http://json-schema.org/draft-06/schema#",
	"definitions": {
	"Affinity": {
	"type": [
	"object",
	"null"
	]
	},

	{
	"$ref": "#/definitions/Coredns",
	"$schema": "http://json-schema.org/draft-06/schema#",
	"definitions": {
	"Coredns": {
	"additionalProperties": false,
	"properties": {
	"affinity": {
	"default": {
	"affinity": {