Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arduino FIDO2 Authenticator

en.ovcharov.me

Post reply on HN
Print view View original

21–30 of 90 posts

Re: Arduino FIDO2 Authenticator

#21

Post by gruez »

archi42 wrote: post #16
StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido

That's surprisingly cheap, less than $10 for a token. Any downsides?

Re: Arduino FIDO2 Authenticator

#22

Post by solarkraft »

gruez wrote: post #21
archi42 wrote: post #16

Earlier quoted context omitted.

Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido

That's surprisingly cheap, less than $10 for a token. Any downsides?

I've had detection issues with some (unpopular) Linux command line tools. No issues with Firefox on Windows and Linux, though.

Re: Arduino FIDO2 Authenticator

#23

Post by archi42 »

snakeye wrote: post #18
archi42 wrote: post #16

Earlier quoted context omitted.

Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido

This project is a spin-off from my wireless biometric authenticator. I was asked to make it open source many times. Other than that - I've got one on my keyring as well. But buying one is not as fun as making :)

/me looks at his collection of electronic parts: Absolutely :) However, there is only so much time one can spent on this. Reminds me I should continue working on some FOSS after $dayjob is done for today...

Re: Arduino FIDO2 Authenticator

#24

Post by bendoerr »

Can anyone explain or further expand on this statement

> plain C and ESP IDF are too difficult for the broad audience

My intuition is that most folks who hack on EPS32 and other microcontrollers have no problem with these things.

Re: Arduino FIDO2 Authenticator

#25

Post by snakeye »

mtgx wrote: post #13
snakeye wrote: post #12

Earlier quoted context omitted.

Yes, I have seen this recently. Google is so unsatisfied with BLE in FIDO2 so they removed support for it from the Chrome browser.

Yubico has said from the very beginning that they will stick to NFC because Bluetooth is not secure. Bluetooth is a 3000+ pages spec that's a mess and will likely always remain a mess. Maybe it's time for something better?

I'm using a bluetooth keyboard and I type my passwords in plain text. I don't think that public key sent over bluetooth is less secure. So it's a very tricky topic and I think it's more about corporate insterests that actual security.

Re: Arduino FIDO2 Authenticator

#26

Post by dividedbyzero »

solarkraft wrote: post #22
gruez wrote: post #21

Earlier quoted context omitted.

That's surprisingly cheap, less than $10 for a token. Any downsides?

I've had detection issues with some (unpopular) Linux command line tools. No issues with Firefox on Windows and Linux, though.

Could you say which ones? It would be good to know whether anything I use is known to be problematic with these.

Re: Arduino FIDO2 Authenticator

#27

Post by archi42 »

solarkraft wrote: post #22
gruez wrote: post #21

Earlier quoted context omitted.

That's surprisingly cheap, less than $10 for a token. Any downsides?

I've had detection issues with some (unpopular) Linux command line tools. No issues with Firefox on Windows and Linux, though.

I didn't try any command line utilities and only use it for the web with Firefox (e.g. GitHub). Can confirm: Works well on both Linux (needs some udev rule, but I think that's true for all these sticks?) and Windows.

To further answer GP: Lacks Bluetooth/NFC, so it's not usable with a smartphone (okay, maybe with a large USB-OTG adapter). No idea on the supported protocols, I think Yubikeys offer a lot more options there, but it's good enough for web authentication.

Manufacturer support was pretty good: My first token was DOA, and I got a replacement token plus a free Mini. The replacement is now my backup unit and, as mentioned, carry the Mini on my keychain.

Re: Arduino FIDO2 Authenticator

#28

Post by archi42 »

Freak_NL wrote: post #19
archi42 wrote: post #16

Earlier quoted context omitted.

Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido

Despite having a 'buy now' link to amazon.{de,fr,es,uk}, it refuses to ship to the Netherlands. That's disappointing (and sloppy).

Oh, that's really weird. I got it from .de delivered to DE. Maybe send the manufacturer a mail and ask them to fix it? Mine came DOA and I remember them to be pretty friendly.

Re: Arduino FIDO2 Authenticator

#29

Post by ChrisSD »

gruez wrote: post #21
archi42 wrote: post #16

Earlier quoted context omitted.

Not sure if applicable to your use-case, but I'm using a HyperFIDO Mini[1]. Much cheaper than the Yubikey, and the form factor is also nice for just keeping it in a (reachable by hand) USB port. Though I carry mine on the keychain (and have an older, bigger one at home as a backup). [1] https://hypersecu.com/tmp/products/hyperfido

That's surprisingly cheap, less than $10 for a token. Any downsides?

No FIDO2 so it won't work with everything. No NFC.
Post reply on HN