ecesena

36 ms·

361.
Solo v2: redesign of the open FIDO2 security key(solokeys.com)
4 points by ecesena 6y ago|0 comments
362.
by ecesena 6y ago
Thank you for buying and for recommending it! The v2 is water resistant, we sealed all components in a layer of epoxy. For v1 there's still a layer of epoxy on the components. As long as you dry it before usage, a bit of water shouldn&
363.
by ecesena 6y ago
We did it with just the Kickstarter, so around $100k, nothing out of pocket except maybe a total of $1-2k to prototype. The "mistake" we did initially is that we didn't account for enough extra inventory. I mean, with the KS
364.
by ecesena 6y ago
> Unlocking with FIDO2 security tokens (well, at least with those which implement the hmac-secret extension, most do). i.e. your YubiKeys (series 5 and above), or Nitrokey FIDO2 and such. FYI, Nitrokey runs Solo FIDO2 implementation [1],
365.
FYI HN: Solo v2, redesign of open FIDO2 security key, launches on Jan 26(twitter.com)
1 points by ecesena 6y ago|0 comments
366.
by ecesena 6y ago
We launched https://solokeys.com 2y ago. We're 4, 2 with kids 2 without. I think having partners is fundamental to keep the flywheel going. And also accept that -at the beginning- it's a side project for everybody, so
367.
by ecesena 6y ago
I hear you. The stm32 used in v1 was 3x3mm, while the new nxp lpc55s6x used in v2 is 5x5mm. Plus we added 2mb of flash, though it's optional. If anyone wants to try to packing the components into a somu v2, that'd be a nice additi
368.
by ecesena 6y ago
This is true for all 2FA methods but not for FIDO security keys. With FIDO, the hostname of the site you're browsing is signed in the assertion, therefore the attacker -even with automation- can't reuse it on the target site. This
369.
by ecesena 6y ago
I can confirm what you and _wldu are saying and yes, the latest project is https://solokeys.com/v2 and is launching end of this month. From an economic perspective, unfortunately, it's really hard to focus on reducing
370.
by ecesena 6y ago
Also, I haven't checked it yet, but I just saw this on the home page: https://news.ycombinator.com/item?id=25812025
371.
by ecesena 6y ago
Take a look at bugcrowd and hackerone. Ton of resources and opportunities, even to make some money.
372.
by ecesena 6y ago
Can you elaborate? I can share about SoloKeys ( https://github.com/solokeys/solo ), an open security key. We set up a company and therefore have employees/founders working on the project. It's for profit and we
373.
by ecesena 6y ago
<shameless plug> We're definitely smaller, but we're launching Solo v2, a full upgrade of our open source security key. Crowdfunding will start end of month. https://solokeys.com/v2
374.
by ecesena 6y ago
We use Lattice ( https://lattice.com ), I do weekly 1:1. The thing I like is that as I come up with topics I add them to the agenda. During the meeting we go through the topics, check them out and possibly create followup tasks. L
375.
Google Titan security keys hacked by French researchers(nakedsecurity.sophos.com)
3 points by ecesena 6y ago|0 comments
376.
by ecesena 6y ago
I run 1mi/day on average, i.e. 365mi/y. Right now I typically run 5mi/time but when I started it was much less. I started when Mark Zuckerberg did his challenge 3y ago and have been doing it since. To be fair, last year I cou
377.
by ecesena 6y ago
No, it's incorrect. Do you have a link so we can fix? Somu can store 50 resident keys exactly like Solo v1, as it has exactly the same MCU. In both there's a single master secret that's used to derive the (non-resident) keys.
378.
by ecesena 6y ago
Really like this kind of projects. For me a killer feature would be to just write my docs inside google docs and render the website from that. That would help a ton with sharing to other people (especially non-tech), gathering feedback as c
379.
by ecesena 6y ago
Is anyone working on low power open risc-v implementations? (Ideally including manufacturing, i.e. a physical device that I could buy/build on top of)
380.
by ecesena 6y ago
I almost always repost 1-2 times when I have something "big", unless the 1st post hits the home page of course. Most of the times I try a slightly different angle, maybe a variation in the title. It definitely works, in the sense
381.
by ecesena 6y ago
Reversible refers to the plug. USB-C is of course reversible, and USB-A also is. There’s no constrain on the number of keys. You can use 1 device with unlimited sites, both v1 and v2, because keys are generated on-the-fly and not stored. (T
382.
by ecesena 6y ago
Yes to both. We do support firmware upgrade, unlike other security keys. For example in 2020 we patched a couple security issues, while Yubico, Google Titan and Feitian all recalled keys. Specs and thus firmware are getting bigger and more
383.
by ecesena 6y ago
Check out hackernoon.com. It has many pros of medium, less cons imo. Beware that Hackernoon is a publication, so you can publish stories that will be reviewed, not really just anything like a press release.
384.
Ask HN: Who's Building a SaaS in 2021?
9 points by ecesena 6y ago|6 comments
385.
A new open security key: Solo v2(solokeys.com)
30 points by ecesena 6y ago|15 comments
386.
by ecesena 6y ago
Check out Superset. https://github.com/apache/incubator-superset It’s modern, easy to extend. From the same author of apache airflow.
387.
Ask HN: Commodity Features for SaaS – What and How?
3 points by ecesena 6y ago|0 comments
388.
by ecesena 6y ago
Try pitching to founders that just raised a round and have yet to build a team. They could start with just 28hr workers. Integrating 1x 28hr worker in an existing environment of 38hr+ workers seems just a mess to me, definitely not worth th
389.
by ecesena 6y ago
I tried “home alone” and the 1st result is Becky. Looking at the text of the reviews it makes sense, but it seems a completely different age target?
390.
by ecesena 6y ago
Check out sendy: https://sendy.co/

More ›