8 ms·

The offline device with a plugin usb keyboard that "types" in your username and password is exactly what i've wanted forever. There are some devices people have

The offline device with a plugin usb keyboard that "types" in your username and password is exactly what i've wanted forever. There are some devices people have made and posted online. I made a POC with an old android phone once but never got past that stage. I investigated the bluetooth encryption and it didn't really seem up to the task. You could create a dongle that lived on wifi though that would do the same.

jiveturkey 2y ago
could you post a link or 2 of the DIY devices? very interesting since this kind of device obviously needs a lot of integration into the PWM software ecosystem.
- denimnerd42 2y ago
  seems like everyone has this idea now if you search google. https://www.google.com/search?q=password+manager+with+usb+keyboard+emulation&oq=password+manager+with+usb+keyboard+emulation https://www.google.com/search?q=password+manager+with+usb+ke... https://github.com/tejado/Authorizer https://github.com/tejado/Authorizer https://hackaday.com/2020/02/08/usb-password-keeper-runs-on-tiny-chip/ https://hackaday.com/2020/02/08/usb-password-keeper-runs-on-... https://www.amazon.com/OnlyKey-Stealth-Black-Case-Communication/dp/B06Y1CSRZX https://www.amazon.com/OnlyKey-Stealth-Black-Case-Communicat...
jrexilius 2y ago
I'm getting ready to release ours as open source (hardware and software) soon: https://www.anomie.tech/products/anigma/ce/ https://www.anomie.tech/products/anigma/ce/
- denimnerd42 2y ago
  oh wow. i can't wait to see more!
bee_rider 2y ago
I think it depends on the password, Bluetooth encryption would probably be fine for, like, my forums passwords. If anyone within, like, 50 feet of me right now wants to break into my Hackernews account… IDK, my dog does seem like a real jerk actually, so if I make any dumb posts let’s assume that she’s stolen my passwords. A dedicated device would be nice and, actually, keeping your passwords on something that never even has to touch the internet would be ideal. But my phone already has a nice big touchscreen to make it easier to pick a password. Reusing an old device could work but that’s limited.
- denimnerd42 2y ago
  i've thought of all kinds of iterations with varying levels of security. the phone with BT encryption would be fine in general but that would get picked apart for security if you actually tried to market it as secure. the really secure way I was thinking is a small touch device that could be small enough to slide into your wallet or even as a device that would live in a phone case exposed on the back of your phone. then there would be a small yubi key like dongle that you'd plug in to whatever your target device is and it would communicate over wifi. that would be like the ultra paranoid version. then you could have the iphone/android app that communicates with the dongle, the one that uses BT encryption, the one that uses a USB cable from the phone to emulate a keyboard.. options are endless. there's some features you could have like computer vision to recognize the login prompt. it's easy to get into an imaginative loop with the ideas.

jiveturkey 2y ago

could you post a link or 2 of the DIY devices? very interesting since this kind of device obviously needs a lot of integration into the PWM software ecosystem.

denimnerd42 2y ago
seems like everyone has this idea now if you search google. https://www.google.com/search?q=password+manager+with+usb+keyboard+emulation&oq=password+manager+with+usb+keyboard+emulation https://www.google.com/search?q=password+manager+with+usb+ke... https://github.com/tejado/Authorizer https://github.com/tejado/Authorizer https://hackaday.com/2020/02/08/usb-password-keeper-runs-on-tiny-chip/ https://hackaday.com/2020/02/08/usb-password-keeper-runs-on-... https://www.amazon.com/OnlyKey-Stealth-Black-Case-Communication/dp/B06Y1CSRZX https://www.amazon.com/OnlyKey-Stealth-Black-Case-Communicat...

jrexilius 2y ago

I'm getting ready to release ours as open source (hardware and software) soon: https://www.anomie.tech/products/anigma/ce/ https://www.anomie.tech/products/anigma/ce/

denimnerd42 2y ago
oh wow. i can't wait to see more!

bee_rider 2y ago

I think it depends on the password, Bluetooth encryption would probably be fine for, like, my forums passwords. If anyone within, like, 50 feet of me right now wants to break into my Hackernews account… IDK, my dog does seem like a real jerk actually, so if I make any dumb posts let’s assume that she’s stolen my passwords. A dedicated device would be nice and, actually, keeping your passwords on something that never even has to touch the internet would be ideal. But my phone already has a nice big touchscreen to make it easier to pick a password. Reusing an old device could work but that’s limited.

denimnerd42 2y ago
i've thought of all kinds of iterations with varying levels of security. the phone with BT encryption would be fine in general but that would get picked apart for security if you actually tried to market it as secure. the really secure way I was thinking is a small touch device that could be small enough to slide into your wallet or even as a device that would live in a phone case exposed on the back of your phone. then there would be a small yubi key like dongle that you'd plug in to whatever your target device is and it would communicate over wifi. that would be like the ultra paranoid version. then you could have the iphone/android app that communicates with the dongle, the one that uses BT encryption, the one that uses a USB cable from the phone to emulate a keyboard.. options are endless. there's some features you could have like computer vision to recognize the login prompt. it's easy to get into an imaginative loop with the ideas.