ecesena

66 ms·

751.
by ecesena 8y ago
Any news on writes? I assume no... :/
752.
by ecesena 8y ago
Very cool idea, congrats -- we're spending more than a month creating a KS campaign, but I like this concept to move super quickly just to get feedback!
753.
by ecesena 8y ago
Check out this episode from the Kevin Rose's podcast: https://itunes.apple.com/us/podcast/the-kevin-rose-show/id10...
754.
by ecesena 8y ago
I've been working for a while on a sort of language for writing highly optimized cryptographic code, mostly elliptic curve cryptography where there's a very elegant mathematical description, but when you try to optimize every sing
755.
Open Source at Pinterest (new site)(opensource.pinterest.com)
3 points by ecesena 8y ago|0 comments
756.
Pseudo Constant Time Implementations of TLS Are Only Pseudo Secure [pdf](eprint.iacr.org)
2 points by ecesena 8y ago|0 comments
757.
Open Source at Pinterest (new site)(opensource.pinterest.com)
2 points by ecesena 8y ago|1 comments
758.
by ecesena 8y ago
Pretty amazing, congrats to the authors. As a technical person I don’t particularly love privacy = confidentiality, but I understand the desire to simplify. If you’re looking for something next, I vote for phishing. We tried to make a short
759.
by ecesena 8y ago
Thank you!
760.
by ecesena 8y ago
Codes can be replied. Security keys cryptographically sign the hostname, so the credentials generated can't be used across different domains. This is a short edu video, I'd be curious if you have any feedback: https://t
761.
Phishing and FIDO2 Security Keys(twitter.com)
2 points by ecesena 8y ago|0 comments
762.
by ecesena 8y ago
Good point, thank you -- it's also almost time to announce the date!
763.
by ecesena 8y ago
No. Disclaimer: I'm working on Solo ( https://solokeys.com ), open source FIDO2 security key, which is the successor of U2F Zero ( https://u2fzero.com ), open source U2F token.
764.
by ecesena 8y ago
We want to provide an open source alternative (hardware & firmware). As others mentioned, note that there's a difference between the new Yubikey Security Key (FIDO2 only) and previous Yubikeys, that do multiple things, including pg
765.
by ecesena 8y ago
The Titan (& the Feitian) have a usb cable. Digipass Secure Click sells with a ble2usb dongle, that let you use ble with your laptop (I have it fixed into my external monitor for example). Note that it's not a limitation of the sec
766.
by ecesena 8y ago
Usb-a (or -c), and NFC will be available. Price for NFC should be around $30-35, to be confirmed. Plus various Kickstarter discount. We won't have bluetooth, at least in the first iteration. The chip we chose is pin-compatible with ano
767.
by ecesena 8y ago
Oh sorry I didn't know that and can't edit. Hopefully an admin can help.
768.
by ecesena 8y ago
Very sad. FYI, we're going to launch a Kickstarter for Solo, an open source FIDO2 security key ( https://solokeys.com ), and we're planning to offer free shipping in both US and EU. I'm an Italian living in the US,
769.
Titan Security Key Available(store.google.com)
64 points by ecesena 8y ago|84 comments
770.
by ecesena 8y ago
Is there a cloud version, e.g. what we should expect on AWS?
771.
by ecesena 8y ago
Led matrix with Android Things. The idea is an output-only device controlled via mobile app, with a retro style. Project delayed because AT gpio is pretty slow, and couldn't pilot the matrix fast enough. We're then using a STM32,
772.
Phishing and FIDO2 security keys [short video](twitter.com)
1 points by ecesena 8y ago|0 comments
773.
by ecesena 8y ago
Not a good idea imo, because as your team grows, code is code and people will forget. Easier to use a vault, i.e. an external service where you store any secret, and from code you only load secrets from the vault. We use knox [1], but there
774.
by ecesena 8y ago
The problem I think is the browser, e.g. Chrome only implements CTAP over USB. The Secure Click (yet another security key) is sold with a usb2ble dongle, so you can use it wirelessly also with your laptop/desktop.
775.
by ecesena 8y ago
Yes, I'm aware of the general comments, I was trying to get to the core/specifics. For example, you mentioned multiple times that hardware breaks, can be stolen, the interfaces aren't standard. But all these things are actual
776.
by ecesena 8y ago
It doesn't seem this can really be FIDO, because FIDO only defines usb, nfc, and ble security keys. I'm not saying Krypton is bad, just that you're installing an extension that (I imagine) interacts with a server to send a pu
777.
by ecesena 8y ago
> it's especially better than u2fzero. ;) genuinely curious: why? (disclaimer: I'm working on Solo, the successor of u2fzero)
778.
by ecesena 8y ago
BTW, we're working on an open source FIDO2 security key, Solo. We're having a kickstarter soon, and if you're interested you can join the waiting list at https://solokeys.com/
779.
by ecesena 8y ago
I suspect these keys will be FIDO2, so even if they look the same, even Feitian might raise up its prices a little bit supporting the new standard. I don't know, just guessing. Also, in Google's $50 there are also 2 cables usb-a2c
780.
by ecesena 8y ago
It's pretty much the same. One of these keys has bluetooth so it also works with iphone without any cable.

More ›