Earlier quoted context omitted.
For those confused, see https://github.com/conorpp/u2f-zero/commit/dd71758a
Is that green because it supports difs?!
Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
61–70 of 94 posts
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#62U2F seems great. I've just started using it and am looking for a device. Maybe now I'll build my own! His article on accelerating a program with hardware was a great read too. https://conorpp.com/2015/12/16/how-to-accelerate-a-program-w...
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#63I just hope the keys are not his home/office keys. Please do not secure the access to your digital life with an U2F token and break the security of your real life by putting a picture of your keys in the open...
You should not be using low security keys for home and office in the first place.
Only a plebe would secure their basement door with anything less than 2FA and 1024 bits of encryption.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#64Earlier quoted context omitted.
You should not be using low security keys for home and office in the first place.
Only a plebe would secure their basement door with anything less than 2FA and 1024 bits of encryption.
On a more serious note I had something like this in mind: http://www.evva.at/products/mechanical-locking-systems/mcs-l...
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#65I just hope the keys are not his home/office keys. Please do not secure the access to your digital life with an U2F token and break the security of your real life by putting a picture of your keys in the open...
You should not be using low security keys for home and office in the first place.
Plenty of people rent, and can't easily change the locks or add more locks to the house.
Upon saying that, I've added extra locks (bedroom locks) to the past 2 houses I've lived in, and the landlord had no issues, but that's student flats and cheap landlords.
That's not to mention that it's a lot easier to just break a window than pick a lock. I have never heard of a burglar breaking into a house by picking the lock. The sort of people that burgle residential houses tend not to be the sort of people with the skill, intelligence and finesse to pick locks.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#66My barrier to entry with a lot of DIY hardware projects was an incorrect assumption that it was difficult/expensive to get PCBs made. Looking into this, I found the blog of the guy running this project and he had some experience with various cheap PCB vendors, with stencils going as low as $18. [1] [1]: https://conorpp.com/2016/03/13/my-experience-with-dirtypcbsc...
Stencils aren't really needed, they're only really useful when using a reflow oven, and even then, I honestly think it's easier to hand solder for a single board than to pick and place and reflow.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#67Earlier quoted context omitted.
A lot of amateur radio HF range projects use what is known as the "manhattan style" construction where, a copper clad board is used as a ground plane, so to speak and then tiny round pads are glued to it, which act as islands. The pads can be made using paper punch of appropriate grade. I have used cheap punch used for cutting paper and have made pads in the past. The parts are then soldered directly to these island…
Modern SMD microcontrollers tend to have pretty fine pin pitches, often in the 1mm ballpark. You really want a proper PCB for those.
I recently soldered a board using a MCU with a 0.5 mm pitch.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#68U2F seems great. I've just started using it and am looking for a device. Maybe now I'll build my own! His article on accelerating a program with hardware was a great read too. https://conorpp.com/2015/12/16/how-to-accelerate-a-program-w...
Github login still saves 20% on Yubikey U2F, putting it at $20 (US) shipped to the U.S. and Canada.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#69The author, Connor Patrick's personal site has a "looking for work" page[1]. It reads: I want to work on projects that do good. I don’t want to work on projects regarding surveilance or the weaking of existing cryptosystems. Way to go Connor! [1]: https://conorpp.com/work/
>>> I’m currently looking for work in the U.S. government. A crypto work in the goverment not related with surveilance - directly or not- seems difficult to find. Or am I missing something ?
You're able to work in federal, state, local or tribal government to meet the obligation.
There are plenty of information assurance roles that have no impact on surveillance, etc. But those roles don't involve direct crypto work.
Re: Show HN: A secure, open source U2F token you can make with $4.5 worth of parts
#70U2F seems great. I've just started using it and am looking for a device. Maybe now I'll build my own! His article on accelerating a program with hardware was a great read too. https://conorpp.com/2015/12/16/how-to-accelerate-a-program-w...
I use this $6 one.
https://www.amazon.com/gp/product/B00OGPO3ZS
which I can confirm works with google account, github, dropbox. It is a buttonless design that activates upon insertion.
While an interesting idea, the $4.50 board + $3 in smt parts equates to a 25% cost increase vs. the cheap one above, assuming you already have the tools/programmer. Long term durability of the one I linked is still in question, I've been using it since about Jan 1.