6 ms·
TOTP Authenticator for PalmOS
- ranger_danger 2y agoCool. I also wrote one in nuklear that works on Win9x and up, MacOS8/9/X-up, *nix and even BeOS/Haiku.
- gelstudios 2y agoI would love to see that, especially if the project builds cleanly on all those platforms.
- ranger_danger 2y agoit does, single Makefile
- The_SamminAter 2y agoLikewise.
- TacticalCoder 2y agoNice! I wrote one running in text-mode, which I ran for years on an old, non-networked, Raspberry Pi 2 (no WiFi capability on that one). I'd need to unlock my app with a password. I just reused some Java TOTP API and wrote a tiny app around it.
- pushedx 2y agoTOTP on a GameBoy cart using a cart with an RTC would be awesome.
- deleted 2y ago[deleted]
- jsheard 2y agoMost flashcarts have the RTC function so that should be doable with off-the-shelf hardware.
- pushedx 2y agoright, I've got one of those on my shelf here but it needs a new battery
- codetrotter 2y agoDouble awesome if it’s one of those carts that can slot another cart into it, and then you pair it with a Game Boy Camera to scan TOTP setup QR codes. https://en.wikipedia.org/wiki/Game_Boy_Camera https://en.wikipedia.org/wiki/Game_Boy_Camera
- deleted 2y ago[deleted]
- lxgr 2y agoAnd then run it in Liberty, in a Palm OS emulator :)
- tantalic 2y agoFINALLY
- deleted 2y ago[deleted]
- layer8 2y agoI like how clearly scrollability is indicated on PalmOS, even without a scrollbar.
- hypercube33 2y agoFeels like MacOS, chrome and edge and Windows all are pushing for 5px wide auto hidden scroll bars. I miss the chunky touch friendly ones that were easy to use, honestly. that said to build off your comment - everything on Palm felt extremely thought about for ease and obvious use end to end and it's part of why I absolutely miss it.
- zx8080 2y agoDoes anyone know whether the Palm UI/UX elements are protected by IP/patents? Meaning cannot use these ideas or elements in new projects without fear of a lawsuit from whoever owns the Palm IP legacy now.
- wtallis 2y agoIt's old enough that patents are definitely not an issue, and dead enough that trademarks are probably defunct. So any imitation/inspiration that falls short of obvious copyright infringement is unlikely to run into trouble.
- mrd3v0 2y agoUI/UX patents? Outside of the US it is hard to see how a court would validate that. IIRC they are excluded from patentability in the EU.
- varjag 2y agoYou can absolutely register your designs with EU patent office. https://www.euipo.europa.eu/en/designs https://www.euipo.europa.eu/en/designs
- rkagerer 2y agoPalm had the best mobile UI I've ever used. The stuff out of Apple and Android seems like candy with saturated fats by comparison.
- xattt 2y agoThe juxtaposition of a TOTP with a rosary app suggests, at least to me, that you’ll need to authenticate at the pearly gates. Make sure to keep your recovery codes.
- userbinator 2y agoI remember when PalmOS devices were common, many "apps" available for them were of a religious nature. Various versions of The Bible were popular.
- fnord77 2y ago[flagged]
- deleted 2y ago[deleted]
- neilv 2y agoThis project reminds me of a cyberpunk SF story, in which (something like) some super elite hackers, needed for a special job, chose gear old enough to be impervious to the adversary they were facing. (Not cyberdecks contemporary of the setting, but something more like modded Nintendos, which the black ice wouldn't know what to do with.) I also had that story in mind several years ago, when the Intel Management Engine ridiculousness ticked me off, and I went to a lot of trouble to make and store half a dozen Libreboot X200 "decks". (Though I don't do 31337 things, so I mostly only ended up using one such deck to keep an eye on my 401(k) account.)
- dannyw 2y agoI one purchased a Coffee Lake SFF PC from eBay from a fleet reseller, and I discovered a "ME DISABLED" sticker on the chassis when I received it. Sure enough, every single software tool, or the BIOS/UEFI itself suggests ME is disabled, or does not exist at all. 'Features' requiring ME like Intel SGX appear as not supported. I'm not sure how exactly they did it, and/or if there are any other modifications made to the system, but digging further is beyond my skill level. My theory, with no evidence, is that this is an ex-govt (security/defense?) PC that somehow got sold.
- neilv 2y agoIIRC, there was a non-publicly-known switch to turn off IME, for government purposes, which became publicly-known. There have also been efforts to delete just part of IME from the flash. A couple links: https://github.com/corna/me_cleaner https://github.com/corna/me_cleaner https://doc.coreboot.org/northbridge/intel/sandybridge/me_cleaner.html https://doc.coreboot.org/northbridge/intel/sandybridge/me_cl... On X200-era systems, however, you can remove IME entirely from the flash, which is what I did. I put only Coreboot and GRUB2 on the flash, but you can add SeaBIOS to that, if you want more PC BIOS facilities and options available. (So I stockpiled a few backup units of the X200, before they disappeared from the market, or the available units got too beaten up or expensive.)
- vel0city 2y ago
- mistyvales 2y agoHow does one use a Palm OS phone with no 4g/3g support? Can you even get 2g service anymore?
- LeoPanthera 2y agoThe short answer is that you can't.
- gunapologist99 2y agoWell, you can use it as a Palm device, but the phone capabilities will be forever broken :'(
- j45 2y agoBy phone it meant making phone calls and not surfing, so the phone capabilities and sms capabilities were fine.
- LeoPanthera 2y agoI know someone who put a private GSM cellular base station in their attic just so that their collection of retro phones would work. I suppose that's an option. I think the FCC lets you do it without a license below a certain wattage.
- acjohnson55 2y agoThat's pretty sweet. What kind of hardware is necessary for this?
- LeoPanthera 2y agoI have no idea. I wonder if you could do it with some kind of SDR radio, these days.
- ranger_danger 2y ago
- GlacierFox 2y agoTop of The Pops?
- teddyh 2y agoTime-based One-Time Password (RFC 6238).
- hi_hi 2y agoThis is what I immediately think of too. Unfortunately, unless you're of a specific age and from the UK, the painful mental juggling act you have to go through every time you see TOTP won't be relatable.
- silentsea90 2y agoOr you listen to a lot of 80s music :)
- basementcat 2y agoMorning Standup at a state-sponsored hacking organization Bob: Happy Monday everybody! Before we start, just want to give a shoutout to Fred and Jane for that Ether address poisoning attack last week! I know you two really worked hard on that one! Polite applause echos through real and virtual space. Bob: Igor, can you get us started this morning? Igor: Bah, I finally managed to exfiltrate metadata from my target's home TI-99/4 with combined TI BASIC and TMS9900 machine language exploit using security hole in speech synthesizer peripheral... Bob: Igor, can you get to the point? Igor: OK OK, bottom line, my target is hosting their TOTP authenticator on Palm OS instead of Android or iOS! I mean actual Palm Pilot, not some retro hipster pink iPhone running an emulator! Maybe if I can write and induce target to install trojaned PRC file into their Palm Pilot... Bob: Fortunately we're a state sponsored hacking organization with considerable resources. Jeff, do you think you can help Igor? Jeff: Yo, whatcha need?
- j45 2y agoA Palm Pilot probably wouldn't have wifi and it's a good chance it would be reasonably airgapped. Other Palm OS devices for sure though :)
- z3phyr 2y agoThis feels like a normal valley office setting. With l33t stuff, I imagine rave parties like in the matrix, and hackers banging away at their keyboards doing funky things.
- Tijdreiziger 2y agoThe linked one for J2ME phones is also fascinating: https://github.com/baumschubser/hotpants https://github.com/baumschubser/hotpants
- mrweasel 2y agoThat is really cool. I basically need two features in a phone, tethering and TOTP.
- IvyMike 2y agoAlso of interest, from a few years ago: TOTP board that fits into classic Casio F-91W wrist watch: https://news.ycombinator.com/item?id=33243434 https://news.ycombinator.com/item?id=33243434
- dallas 2y agoI got a Sensor Watch Lite after reading about it here on HN. LOVE IT. I don't use the TOTP complication but I did add a number of D&D dice rolling modes.
- mistyvales 2y agoI love mine as well, but a TOTP one would be awesome.. I'll have to look that up
- RachelF 2y agoStyleTap https://styletap.com/ https://styletap.com/ runs PalmOS apps on Android.
- hobobaggins 2y agoThis is cool. You probably have to extract and transport in (SD card?) the TOTP secret, since I imagine a a QR code reader built isn't built-in.
- afitnerd 2y agoThis is cool. I wrote a TOTP authenticator for the ArduBoy: https://developer.okta.com/blog/2018/08/30/build-one-time-password-token-for-mfa https://developer.okta.com/blog/2018/08/30/build-one-time-pa...
- pjerem 2y agoArduboy is reeaaaally something I’m trying not to buy because it looks to be so much fun but I know It’ll die in my unused gadgets drawer.
- deleted 2y ago[deleted]
- guenthert 2y agoOh, stop it, will you? I so miss my Handspring Visor (which, already considered obsolete, I bought from WeirdStuff for a whopping $5 in mint condition some ten years ago). Lost it during one of the moves ... There remains a niche for not connected digital assistants, methinks.