Live data from Hacker News

Keybase 4.0

github.com

11–20 of 26 posts

Re: Keybase 4.0

#11
post #9

Uninstalled because on Windows it registers itself to auto-start on boot no matter what you do. I keep removing it from the autostart places and it keeps registering back. I get it that they want to get usage telemetry, but it's ridiculous for a security focused app to force itself like that. https://github.com/keybase/keybase-issues/issues/2380 https://github.com/keybase/client/issues/3904 https://github.com/keybase…

The annoying part is that the operating system allows this and doesn’t have a good way for users to restrict service startup.

Re: Keybase 4.0

#12
post #9

Uninstalled because on Windows it registers itself to auto-start on boot no matter what you do. I keep removing it from the autostart places and it keeps registering back. I get it that they want to get usage telemetry, but it's ridiculous for a security focused app to force itself like that. https://github.com/keybase/keybase-issues/issues/2380 https://github.com/keybase/client/issues/3904 https://github.com/keybase…

They don't seem to prioritize user choice on the linux version either, there's no snap/flatpak available nor a user friendly option to not mount the FUSE filesystem.

https://github.com/keybase/client/issues/8264

https://github.com/keybase/client/issues/9191

https://github.com/keybase/client/issues/7846

Re: Keybase 4.0

#14
post #7

did anyone figure out what the arrow on the top does? https://i.imgur.com/nqGfSCL.png

It appears to be a "back button", e.g. if you click through some sub-menu items on the settings screen, you can see it clearer and it has this functionality.

Re: Keybase 4.0

#15
post #3
post #2

Still waiting for 2FA authentication (sigh) ... everyone but Keybase and my bank seems to know how important this is!

Where would you want 2FA to be added? When setting up a new device?

Ist there already 2FA for that?

You need to know the password and be in possession of a device already trusted to confirm a new device, right?

Re: Keybase 4.0

#16
post #5

Keybase is a really cool solution to a problem (or problems?) I don't seem to have. I've had an account for a while but don't really have any reason to use it. Seems like they're pivoting towards being a Slack competitor. Maybe if they open sourced the server portion it could be a chat solution that OSS projects can feel okay about using.

Keybase is a great way to do company onboarding. Have a new employee setup a Keybase account (if they don't have one already) and now you have a simple and secure way to have conversations and exchange files (e.g. W-4 forms, insurance, etc) I use it for personal communications too, so it is nice to use the same secure messaging platform for both work and personal and switch back and forth from computer to phone easil…

Hm...

I wonder now could it be used for corporate secret management. I wouldn't like to use cloud solution for that and on existing on premise solutions do not cover all scenarios I need (on-boarding one of them, or guests).

Re: Keybase 4.0

#17
post #3

Earlier quoted context omitted.

Where would you want 2FA to be added? When setting up a new device?

Ist there already 2FA for that? You need to know the password and be in possession of a device already trusted to confirm a new device, right?

IIRC you don't need the password when setting up a new device. I might be misremembering that, though.

You certainly need to be logged in to keybase on an existing trusted device, though.

Re: Keybase 4.0

#18
post #5

Earlier quoted context omitted.

Keybase is a great way to do company onboarding. Have a new employee setup a Keybase account (if they don't have one already) and now you have a simple and secure way to have conversations and exchange files (e.g. W-4 forms, insurance, etc) I use it for personal communications too, so it is nice to use the same secure messaging platform for both work and personal and switch back and forth from computer to phone easil…

Hm... I wonder now could it be used for corporate secret management. I wouldn't like to use cloud solution for that and on existing on premise solutions do not cover all scenarios I need (on-boarding one of them, or guests).

Looks like Keybase Teams is exactly for that:

https://keybase.io/blog/introducing-keybase-teams

Re: Keybase 4.0

#19
I really want to love Keybase but nobody (meaning my wife and friends) will use it because the performance for basic chatting sucks abysmally on mobile (plain text chat works but things like pasting an image don't work, for any wife-acceptable value of work).

This means I haven't wanted to even suggest trialling it at work, so I haven't used the teams feature at all and without that it's basically an encrypted cloud storage mechanism with an interesting Git integration.

    T_T

Re: Keybase 4.0

#20
post #6
post #2

Still waiting for 2FA authentication (sigh) ... everyone but Keybase and my bank seems to know how important this is!

2FA is not very helpful if your service relies on encryption for everything (like keybase). It's not possible to use 2FA without another party verifying the authentication code. Keybase could include this (then they would have to verify it), but so far keybase has gone to great lengths to not actually have to hold any secrets for users. They even perform password hashing in the browser instead of on their servers. 2F…

> It's not possible to use 2FA without another party verifying the authentication code.

That's not true. You can verify the time based codes or do u2f yourself. You don't need a third party for that.

Post reply on HN