Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

github.com

Post reply on HN
Print view View original

31–40 of 94 posts

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#31

Post by jacquesm »

aexaey wrote: post #28
vog wrote: post #24

I'm curious about the following statement in the README: > The token is durable enough to survive on a key chain for years, even after going through the wash. On the other hand, the token is shown as "naked electronics", without a husk. Is that really sufficient for such a device? Does it really withstand (mineral) water, mechanical stress (key chain), let alone the combination of both (washing)?

It would absolutely not survive for very long like this (naked PCB on a key-chain). Mechanical damage from the actual keys on the same chain is what will kill it before water, sweat, washing liquid, pocket lint or ESD do. First things to fail will be ceramic capacitors torn/cracked and leads of SSOP-20 package bent/shorted. That said, it is trivial to protect the board from all of above - just wrap it (except USB con…

Cast in epoxy. Cheap and quite durable.

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#33

Post by StavrosK »

jacquesm wrote: post #31
aexaey wrote: post #28

Earlier quoted context omitted.

It would absolutely not survive for very long like this (naked PCB on a key-chain). Mechanical damage from the actual keys on the same chain is what will kill it before water, sweat, washing liquid, pocket lint or ESD do. First things to fail will be ceramic capacitors torn/cracked and leads of SSOP-20 package bent/shorted. That said, it is trivial to protect the board from all of above - just wrap it (except USB con…

Cast in epoxy. Cheap and quite durable.

Do you have any information on what you need to buy and how it works? Do you need a hot air station?

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#34

Post by unwind »

CJKinni wrote: post #8

My barrier to entry with a lot of DIY hardware projects was an incorrect assumption that it was difficult/expensive to get PCBs made. Looking into this, I found the blog of the guy running this project and he had some experience with various cheap PCB vendors, with stencils going as low as $18. [1] [1]: https://conorpp.com/2016/03/13/my-experience-with-dirtypcbsc...

Yeah, PCB manufacturing really has opened up and become highly available.

On that note, the title neglects the price of the board, which will add to the total cost for building this. From OSH Park it's $4.60 for three copies of the board, bringing the total per token to $4.50 + $1.53 = ~$6.

That's a very interesting microcontroller by the way, I always think it's mildly amusing with 8-bit CPU cores sitting on a hardware USB peripheral. Looks like a nice chip, plenty of I/O, 5 V-capable, built-in 3.3 V regulator and USB firmware, and stuff. Thanks OP for sharing this!

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#35

Post by StavrosK »

CJKinni wrote: post #8

My barrier to entry with a lot of DIY hardware projects was an incorrect assumption that it was difficult/expensive to get PCBs made. Looking into this, I found the blog of the guy running this project and he had some experience with various cheap PCB vendors, with stencils going as low as $18. [1] [1]: https://conorpp.com/2016/03/13/my-experience-with-dirtypcbsc...

I've gotten great results with dirtyPCBs for $14, I've made about five batches with them so far.

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#37

Post by speps »

devy wrote: post #12

The author, Connor Patrick's personal site has a "looking for work" page[1]. It reads: I want to work on projects that do good. I don’t want to work on projects regarding surveilance or the weaking of existing cryptosystems. Way to go Connor! [1]: https://conorpp.com/work/

It's "weakening".

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#38

Post by spacecowboy_lon »

StavrosK wrote: post #33
jacquesm wrote: post #31

Earlier quoted context omitted.

Cast in epoxy. Cheap and quite durable.

Do you have any information on what you need to buy and how it works? Do you need a hot air station?

I think its a combo of two compounds that harden when mixed.

http://uk.rs-online.com/web/p/potting-compounds/1991402/

Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts

#40

Post by sleepychu »

kbaker wrote: post #14
badsock wrote: post #10

This project is awesome, but I'd be worried about my hand brushing up against all that lead every day for years. Or am I being too paranoid? In any case, easily solved with some casting epoxy.

There is a 3d-printable case included in the repo! https://github.com/conorpp/u2f-zero/blob/master/hardware/cas...

TIL Github has an STL preview viewer.
Post reply on HN