Be careful with the bluetooth implementation.
https://www.theverge.com/2019/5/15/18625028/google-titan-sec...
https://nakedsecurity.sophos.com/2019/05/17/google-recalls-t...
edit: formatting
Arduino FIDO2 Authenticator
11–20 of 90 posts
Re: Arduino FIDO2 Authenticator
#12Be careful with the bluetooth implementation. https://www.theverge.com/2019/5/15/18625028/google-titan-sec... https://nakedsecurity.sophos.com/2019/05/17/google-recalls-t... edit: formatting
Yes, I have seen this recently. Google is so unsatisfied with BLE in FIDO2 so they removed support for it from the Chrome browser.
Re: Arduino FIDO2 Authenticator
#13Be careful with the bluetooth implementation. https://www.theverge.com/2019/5/15/18625028/google-titan-sec... https://nakedsecurity.sophos.com/2019/05/17/google-recalls-t... edit: formatting
Yes, I have seen this recently. Google is so unsatisfied with BLE in FIDO2 so they removed support for it from the Chrome browser.
Yubico has said from the very beginning that they will stick to NFC because Bluetooth is not secure.
Bluetooth is a 3000+ pages spec that's a mess and will likely always remain a mess. Maybe it's time for something better?
Re: Arduino FIDO2 Authenticator
#14Be careful with the bluetooth implementation. https://www.theverge.com/2019/5/15/18625028/google-titan-sec... https://nakedsecurity.sophos.com/2019/05/17/google-recalls-t... edit: formatting
Yes, I have seen this recently. Google is so unsatisfied with BLE in FIDO2 so they removed support for it from the Chrome browser.
[deleted]
Re: Arduino FIDO2 Authenticator
#15Be careful with the bluetooth implementation. https://www.theverge.com/2019/5/15/18625028/google-titan-sec... https://nakedsecurity.sophos.com/2019/05/17/google-recalls-t... edit: formatting
Yes, I have seen this recently. Google is so unsatisfied with BLE in FIDO2 so they removed support for it from the Chrome browser.
Re: Arduino FIDO2 Authenticator
#16This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).
Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup).
Re: Arduino FIDO2 Authenticator
#17Fantastic. I have been thinking that the best possible thing would be an external device with a screen and a key pad input. This seems to be exactly that.
You need the screen because the protocol includes the concept of an authenticator with a screen, and that allows you to verify the information even more compared to a yubikey or something like that.
Re: Arduino FIDO2 Authenticator
#18This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).
Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido
This project is a spin-off from my wireless biometric authenticator. I was asked to make it open source many times.
Other than that - I've got one on my keyring as well. But buying one is not as fun as making :)
Re: Arduino FIDO2 Authenticator
#19This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).
Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido
Despite having a 'buy now' link to amazon.{de,fr,es,uk}, it refuses to ship to the Netherlands. That's disappointing (and sloppy).
Re: Arduino FIDO2 Authenticator
#20Fantastic. I have been thinking that the best possible thing would be an external device with a screen and a key pad input. This seems to be exactly that. You need the screen because the protocol includes the concept of an authenticator with a screen, and that allows you to verify the information even more compared to a yubikey or something like that.
Thank you! :)