Live data from Hacker News

How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

blog.lessonslearned.org

31–40 of 179 posts

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#35
post #25

While I like the idea and the listed apps are just awesome (didn't know about termux, wow), the whole setup depends too much on google services for my taste :-/

Yeah, this is a no go for me. I don't use anything by Google at all. How can a security conscious person talk about privacy and security on a Google device? They are listening, filming and tracking every single thing you do near that device.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#36
post #25

While I like the idea and the listed apps are just awesome (didn't know about termux, wow), the whole setup depends too much on google services for my taste :-/

Yeah, this is a no go for me. I don't use anything by Google at all. How can a security conscious person talk about privacy and security on a Google device? They are listening, filming and tracking every single thing you do near that device.

That ("They are listening, filming and tracking every single thing you do near that device") is a claim you're going to have to substantiate. Don't spread such rumours unless you can back them up.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#38
I bought the exact same machine, Samsung Chromebook 3, as soon as I realized I could run Termux on it.

I'm using it to poke at languages I'd normally never have the time to experiment with.

I'm on the train for about an hour every day, and I wouldn't feel comfortable with a "real" laptop - too likely to be stolen. But for $169? Not such a big loss.

I'm also really excited about how rock-solid this thing is, as a way to hand a kid a computer that can really teach them programming.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#39
post #22

So, be inconvenienced in every aspects important to a dev but gain a bit of confidence in your machine (as long as you trust Big-G)? verified boot seems like the only advantage here. You can buy an ebay business-grade laptop with TPM for 40 bucks USD readily, and they don't require reliance on Google or the requirement that one uses a neutered OS. (yes, yes, it's secure. It's a users' platform. Development on chrome…

Cloud restore is the other big win here. You don't have to roll your own and it just works.

That's why the author has you setup a new account so that you can segment your burner data from your real life.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#40
post #34

Regarding the TOTP app, I generally prefer FreeOTP to Google Authenticator/Duo/Authy, etc. It might not provide push codes, but at least the implementation is Open Source and the binaries come from a trusted source.

Agreed, and it's more usable as well (hides the codes by default, copies them to clipboard when you tap one, lets you rearrange them, etc).
Post reply on HN