Solo – Open-source FIDO2 security key • Hacker News Board

Re: Solo – Open-source FIDO2 security key

#41

Post by itp » Wed, Oct 03, 2018, 8:33 PM UTC

sctb wrote: post #34

We've removed “Show HN” on account of a previous one: https://news.ycombinator.com/item?id=18035079 also discussed here: https://news.ycombinator.com/item?id=17778262

That's a shame, since this one is announcing the kickstarter, and those weren't. And there was obvious interest, as well as interesting discussion, on this post.

Re: Solo – Open-source FIDO2 security key

#42

Post by madjam002 » Wed, Oct 03, 2018, 9:14 PM UTC

tstevens wrote: post #15

madjam002 wrote: post #10

Looks awesome. One thing though regarding iOS - I hope Apple don't just open up NFC more, but implement FIDO2 (CTAP2 and Webauthn) utilizing the secure enclave on the device with Face ID. I don't know enough about it, but surely it should be possible and it would make for a great user experience if they did!

They are implementing Webauthn in webkit (including iOS) https://bugs.webkit.org/show_bug.cgi?id=181943 Looks like NFC support may be coming as well https://bugs.webkit.org/show_bug.cgi?id=188624

Oh wow I had no idea, I will be keeping an eye out for those! Thanks for the links!

Re: Solo – Open-source FIDO2 security key

#43

Post by ecesena » Wed, Oct 03, 2018, 9:35 PM UTC

itp wrote: post #41

sctb wrote: post #34

We've removed “Show HN” on account of a previous one: https://news.ycombinator.com/item?id=18035079 also discussed here: https://news.ycombinator.com/item?id=17778262

That's a shame, since this one is announcing the kickstarter, and those weren't. And there was obvious interest, as well as interesting discussion, on this post.

Actually, we've received a clarification. 1) fundraisers are excluded from Show HN, it's in the FAQ, and sorry I missed that. 2) the community is generally sensitive to being marketed, and as much as we were enjoying the discussion, others flagged/reported this post.

Everything considered, this is a fair decision.

Re: Solo – Open-source FIDO2 security key

#44

Post by ac29 » Wed, Oct 03, 2018, 9:36 PM UTC

"Note that to reflash a regular Solo key you have to connect via the debug interface, as for security reasons our firmware only allows signed code upgrade"

Which debug interface is this? JTAG? Something else?

Re: Solo – Open-source FIDO2 security key

#45

Post by ecesena » Wed, Oct 03, 2018, 9:40 PM UTC

ac29 wrote: post #44

"Note that to reflash a regular Solo key you have to connect via the debug interface, as for security reasons our firmware only allows signed code upgrade" Which debug interface is this? JTAG? Something else?

Conor wrote a post about this: https://conorpp.com/3d-printing-a-programming-jig-and-embedd...

We're planning to release the Solo for Hackers "unlocked", meaning we'll disable the check for signed upgrade, so it'll be easier to flash also via usb.

Re: Solo – Open-source FIDO2 security key

#46

Post by maltalex » Thu, Oct 04, 2018, 11:20 AM UTC

madjam002 wrote: post #10

Looks awesome. One thing though regarding iOS - I hope Apple don't just open up NFC more, but implement FIDO2 (CTAP2 and Webauthn) utilizing the secure enclave on the device with Face ID. I don't know enough about it, but surely it should be possible and it would make for a great user experience if they did!

In May Yubico announced IOS support for their nfc keys:

https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-...

Re: Solo – Open-source FIDO2 security key

#47

Post by tanderson92 » Fri, Oct 05, 2018, 2:12 AM UTC

ecesena wrote: post #12

tanderson92 wrote: post #11

Earlier quoted context omitted.

I don't see any mention of smartcard/PGP features (or rsa4096), which makes this a non-starter for me. Sometimes the extra cost is associated with extra features.

We're working on it, it's been the top feature request. We didn't want to over promise in the Kickstarter, but we support firmware upgrade, so it'll be easy to add as soon as it's ready.

Thanks! That’s awesome to hear.