Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arduino FIDO2 Authenticator

en.ovcharov.me

Post reply on HN
Print view View original

51–60 of 90 posts

Re: Arduino FIDO2 Authenticator

#51

Post by snakeye »

alias_neo wrote: post #45
TrueDuality wrote: post #30

> But, wait, is it difficult to find a charger or power bank with Micro USB nowadays? It's definitely trending that way IME...

I understood the point the article was trying to make here, but, actually, it's become almost a nightmare to find a Micro USB cable in my home, so I had to answer "yes". Every time one breaks or gets tatty I bin it and don't replace, because, really, the only thing I need it for is my PS4 controller and the baby monitor. I've burned through a decade or so worth of them thrown in boxes and drawers. It gets really hard…

Nothing can stop us from making the same PCB but with USB Type C connector for charging.

Actually I'm using it in my other device according to the exactly same thoughts.

Re: Arduino FIDO2 Authenticator

#52

Post by alias_neo »

StavrosK wrote: post #50
alias_neo wrote: post #48

Earlier quoted context omitted.

Thanks, going to look into it more tonight, see if I can get a 5C setup.

It is literally just the two commands, I can send them to you when I'm at the pc. I have a 5C too.

That'd be great, thanks. I'll have to do a follow up to my blog post: [SSH 2-Factor's First Factor](https://2byt.es/post/totp2/) once I've had a play.

Re: Arduino FIDO2 Authenticator

#53

Post by mNovak »

StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

The couple dozen keys storage limit definitely feels limiting if this ever supposed to be commonly used. Is anyone using the resident mode which OP mentions?

Re: Arduino FIDO2 Authenticator

#54

Post by alias_neo »

snakeye wrote: post #51
alias_neo wrote: post #45

Earlier quoted context omitted.

I understood the point the article was trying to make here, but, actually, it's become almost a nightmare to find a Micro USB cable in my home, so I had to answer "yes". Every time one breaks or gets tatty I bin it and don't replace, because, really, the only thing I need it for is my PS4 controller and the baby monitor. I've burned through a decade or so worth of them thrown in boxes and drawers. It gets really hard…

Nothing can stop us from making the same PCB but with USB Type C connector for charging. Actually I'm using it in my other device according to the exactly same thoughts.

I've never tried hand soldering a USB-C SMT connector, expecting it to be somewhat harder than Micro USB, is it reasonably doable with hot air?

Re: Arduino FIDO2 Authenticator

#55

Post by snakeye »

alias_neo wrote: post #54
snakeye wrote: post #51

Earlier quoted context omitted.

Nothing can stop us from making the same PCB but with USB Type C connector for charging. Actually I'm using it in my other device according to the exactly same thoughts.

I've never tried hand soldering a USB-C SMT connector, expecting it to be somewhat harder than Micro USB, is it reasonably doable with hot air?

Oh, in fact it's much simpler than MicroUSB. There is special type of USB Type C used for charging - https://en.ovcharov.me/uploads/2020/04/06/20200404_092055.jp...

It has only six huge pads and can be soldered either with hot air or normal soldering iron as a charm.

Re: Arduino FIDO2 Authenticator

#56

Post by corty »

snakeye wrote: post #25
mtgx wrote: post #13

Earlier quoted context omitted.

Yubico has said from the very beginning that they will stick to NFC because Bluetooth is not secure. Bluetooth is a 3000+ pages spec that's a mess and will likely always remain a mess. Maybe it's time for something better?

I'm using a bluetooth keyboard and I type my passwords in plain text. I don't think that public key sent over bluetooth is less secure. So it's a very tricky topic and I think it's more about corporate insterests that actual security.

Bluetooth security has always been a mess and even the specification itself has had egregious bugs that almost all devices were and often are still vulnerable to: you can force 8bit symmetric keys if you like: https://knobattack.com

I would never trust any wireless keyboard or mouse on any even marginally important computer. Bluetooth security is a broken mess, and taken together with the mess most bluetooth functionality is (e.g. perpetually broken, laggy, stuttering, forgetful, lofi audio profiles) bluetooth needs to die asap.

Re: Arduino FIDO2 Authenticator

#57

Post by alias_neo »

snakeye wrote: post #55
alias_neo wrote: post #54

Earlier quoted context omitted.

I've never tried hand soldering a USB-C SMT connector, expecting it to be somewhat harder than Micro USB, is it reasonably doable with hot air?

Oh, in fact it's much simpler than MicroUSB. There is special type of USB Type C used for charging - https://en.ovcharov.me/uploads/2020/04/06/20200404_092055.jp... It has only six huge pads and can be soldered either with hot air or normal soldering iron as a charm.

Oh, now this is a revelation, I had no idea!

P.S. the link has hotlink protection for anyone wanting to click; you'll need to paste the link straight into your address bar

Re: Arduino FIDO2 Authenticator

#58

Post by StavrosK »

mNovak wrote: post #53
StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

The couple dozen keys storage limit definitely feels limiting if this ever supposed to be commonly used. Is anyone using the resident mode which OP mentions?

I am, and yes, it's definitely limiting. I wouldn't buy a Yubikey because of that, I'm very excited about the new Solo keys that should be coming out soon, those will probably support thousands of keys.

Re: Arduino FIDO2 Authenticator

#59

Post by ecesena »

StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

Chiming in to mention SoloKeys, it's open source, FIDO2 certified and supports 50 resident keys.

@snakeye, please feel free to port over the CTAP implementation to your device (same for the other tokens I'm reading in the thread). We have already 3 products selling with our firmware.

https://github.com/solokeys/solo

Re: Arduino FIDO2 Authenticator

#60

Post by sbr464 »

antoinealb wrote: post #6
StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

What I am doing, and I find it to work really well is to have a yubikey nano ( https://www.yubico.com/product/yubikey-5-nano ) in one of the front USB ports of my PC case. Super easy to reach and takes no room at all.

Awesome project.

I have the USB-C version mounted under my desk with a USB-C extension cable. Works well.

https://www.amazon.com/Faracent-Extension-Charging-Nintendo-...

https://www.yubico.com/product/yubikey-5c-nano

Post reply on HN