81–90 of 138 posts
Earlier quoted context omitted.
A mirror and a front facing camera :-)
Wouldn't you need at least 2 mirrors to correct the image?
How do you log in to a mobile site if you have to use your phone to scan the code?
Earlier quoted context omitted.
It's not - it's really just a password manager. The "something I know and something I have" is completely removed by only requiring you to have the phone. If it's a password manager, then that is what it is; if it's meant for security, then it comes back to the recent article on fingerprints not being a password.
It's not really a password manager--there's no shared secrets. The site identifies you by a public key. For authentication, it gives you a nonce, and you sign it with the corresponding private key. All the secrets are kept on your device. I've wondered about the "something I know" dimension as well. Perhaps a passphrase could be used (it already is used to secure the master key). It'd still be a major improvement, as…
This looks like a much less polished version of Clef ( https://getclef.com/ ). Clef is a really awesome app and they're already powering this type of integration for a few hundred websites. One of the founders is an HN regular, although I can't remember his username (Jesse, reply if you see this).
That's me, thanks! We're glad you think we have a little more polish, but to be honest, we're really excited about any replacement to passwords making waves in the tech world. Ultimately, no single group is going to be able to tackle this problem alone, so the more critical thought we have, the better off we all are. If anyone has any questions about Clef, I'd be happy to answer them, but I also don't want to distrac…
Earlier quoted context omitted.
That's me, thanks! We're glad you think we have a little more polish, but to be honest, we're really excited about any replacement to passwords making waves in the tech world. Ultimately, no single group is going to be able to tackle this problem alone, so the more critical thought we have, the better off we all are. If anyone has any questions about Clef, I'd be happy to answer them, but I also don't want to distrac…
Technical crypto spec?
Earlier quoted context omitted.
It's 1 step. Just scan a code. Con: requires internet connectivity, unlike some 2-factor implementations
Isn't access to the internet already required to log into any internet site?
The example in the article being login at the library - the library computer has Internet access, but your phone has to also connect to a wifi (if there is one), or the mobile network (if you are 3G subscriber and there's reception). Then factor in that you might go abroad, I don't know many places where they just give free internet access to anyone with a smartphone...
How do you log in to a mobile site if you have to use your phone to scan the code?
This looks like a much less polished version of Clef ( https://getclef.com/ ). Clef is a really awesome app and they're already powering this type of integration for a few hundred websites. One of the founders is an HN regular, although I can't remember his username (Jesse, reply if you see this).
That's me, thanks! We're glad you think we have a little more polish, but to be honest, we're really excited about any replacement to passwords making waves in the tech world. Ultimately, no single group is going to be able to tackle this problem alone, so the more critical thought we have, the better off we all are. If anyone has any questions about Clef, I'd be happy to answer them, but I also don't want to distrac…