4 ms·

Chrome Key: Building a Hardware Authentication Device Emulator

27 points by joaomppeixoto 8y ago

jiveturkey 8y ago
totally silly. they also implemented the test of user presence (TUP). there's little point to a software version of a U2F token if user-interaction is still required.
- jiveturkey 8y ago
  downvotes with no comments. sigh.
tambourine_man 8y ago
As an aside, that is one cool about page: https://blog.joaopeixoto.net/about/ https://blog.joaopeixoto.net/about/
- IX-103 8y ago
  But using more than 100% of his memory kind of takes away from it. I guess those defunct processes could be swapped to disk, but who keeps more than twice their RAM in swap space...
  - joaomppeixoto 8y ago
    Ahah nice catch!
  - nacs 8y ago
    I'm guessing the CPU % column is for showing how hard he worked at each job..
- joaomppeixoto 8y ago
  Thanks! I'm not very good at designing so kept it "simple".
amelius 8y ago
Nice but I'm on Firefox.
- techsupporter 8y ago
  I think this is what krypt.co does, and they have an extension for Firefox (I use it daily). It's pretty neat. The crux of this post looks to be "this is how I built a thing," which is also pretty neat.
- joaomppeixoto 8y ago
  LIke techsupporter mentioned, this post series is more of a run through. I'm open sourcing the whole project and intend to add support to other browsers. Since it uses standard apis it should just work TM. There are some parts copied from krypt.co with their permission, and I did see their multi browser support, which will help with that.
amaccuish 8y ago
I'd love there to be some sort of "adapter" extension for smartcards so they can be used with webauth. Would let us reuse our already existing smartcard infrastructure.
- rkeene2 8y ago
  I'm sure I could build one if you want. I maintain some smartcard middleware that works in Chrome (as a certificate provider, and on Windows, macOS, Linux, Solaris, HP-UX, etc) called CACKey: https://chrome.google.com/webstore/detail/cackey/lpimdiknnpijeigckalekdccibdmeojg https://chrome.google.com/webstore/detail/cackey/lpimdiknnpi... (or https://CACKey.rkeene.org/ https://CACKey.rkeene.org/ ) I recently added SSH agent support to this as well. Email me I'm interested in your situation, cackey@rkeene.org
nacs 8y ago
Love the writeup. I like how you walk through the concepts and show code snippets instead of just writing a "here's what I did" in a paragraph then linking a Github repo. Great little introduction to web extensions and webauth too.

27 points by joaomppeixoto 8y ago

totally silly. they also implemented the test of user presence (TUP). there's little point to a software version of a U2F token if user-interaction is still required.

jiveturkey 8y ago
downvotes with no comments. sigh.

tambourine_man 8y ago

As an aside, that is one cool about page: https://blog.joaopeixoto.net/about/ https://blog.joaopeixoto.net/about/

IX-103 8y ago
But using more than 100% of his memory kind of takes away from it. I guess those defunct processes could be swapped to disk, but who keeps more than twice their RAM in swap space...
- joaomppeixoto 8y ago
  Ahah nice catch!
- nacs 8y ago
  I'm guessing the CPU % column is for showing how hard he worked at each job..
joaomppeixoto 8y ago
Thanks! I'm not very good at designing so kept it "simple".

amelius 8y ago

Nice but I'm on Firefox.

techsupporter 8y ago
I think this is what krypt.co does, and they have an extension for Firefox (I use it daily). It's pretty neat. The crux of this post looks to be "this is how I built a thing," which is also pretty neat.
joaomppeixoto 8y ago
LIke techsupporter mentioned, this post series is more of a run through. I'm open sourcing the whole project and intend to add support to other browsers. Since it uses standard apis it should just work TM. There are some parts copied from krypt.co with their permission, and I did see their multi browser support, which will help with that.

amaccuish 8y ago

I'd love there to be some sort of "adapter" extension for smartcards so they can be used with webauth. Would let us reuse our already existing smartcard infrastructure.

rkeene2 8y ago
I'm sure I could build one if you want. I maintain some smartcard middleware that works in Chrome (as a certificate provider, and on Windows, macOS, Linux, Solaris, HP-UX, etc) called CACKey: https://chrome.google.com/webstore/detail/cackey/lpimdiknnpijeigckalekdccibdmeojg https://chrome.google.com/webstore/detail/cackey/lpimdiknnpi... (or https://CACKey.rkeene.org/ https://CACKey.rkeene.org/ ) I recently added SSH agent support to this as well. Email me I'm interested in your situation, cackey@rkeene.org

nacs 8y ago

Love the writeup. I like how you walk through the concepts and show code snippets instead of just writing a "here's what I did" in a paragraph then linking a Github repo. Great little introduction to web extensions and webauth too.