[{"data":1,"prerenderedAt":490},["ShallowReactive",2],{"project-11950664":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":46,"post_text":48,"what":49,"said":95,"maker_in_thread":182,"shape":194,"grid":199,"attempts":452,"same_week":453,"maker_shows":33,"maker_hidden":482,"reader_version":483,"card":484},"11950664","u2f-zero","A secure, open source U2F token you can make with $4.5 worth of parts","title","Show HN: A secure, open source U2F token you can make with $4.5 worth of parts","https:\u002F\u002Fgithub.com\u002Fconorpp\u002Fu2f-zero","github.com","conorpp",1466555309,2016,267,92,85,2264,4,"legend","security_privacy","hardware security key","hardware",[24,25,26,27],"u2f","security key","two-factor authentication","open source hardware","curious",-0.052,{"positive":31,"neutral":32,"mixed":33,"critical":34},5,24,1,9,39,{"pricing":37,"design":38,"privacy":40,"execution":42,"performance":43,"idea":44,"docs":45},{"positive":33,"critical":33},{"positive":33,"critical":39},2,{"positive":41,"critical":39},0,{"positive":41,"critical":33},{"positive":41,"critical":39},{"positive":39,"critical":41},{"positive":41,"critical":33},[31,41,47,41,31,41,41,41,41,47,41,41,41,47,33,41,41,41,41,47,33,41,41,33,47,31,33,47,47,47,47,33,33,47,41,33,31,47,47,39],3,null,{"problem":50,"audience":48,"pricing":56,"motivation":48,"time_to_build":48,"stack":64,"openness":92,"stage":93,"team_size":94},{"value":51,"source":52,"evidence":53},"Cheap, open source two-factor authentication token that can be built at home.","maker",[54],{"id":55},"post",{"value":57,"source":58,"evidence":59},"About $4.50 in parts, plus roughly $1.53 for PCBs per token.","commenter",[60],{"id":61,"by":62,"text":63},"11952384","unwind","Yeah, PCB manufacturing really has opened up and become highly available. On that note, the title neglects the price of the board, which will add to the total cost for building…",[65,75,81],{"value":66,"source":52,"evidence":67},"Atmel ATECC508A crypto chip",[68,71],{"id":69,"by":11,"text":70},"11951032","No it is purely a hardware peripheral that just has configuration options. http:\u002F\u002Fwww.atmel.com\u002FImages\u002FAtmel-8923S-CryptoAuth-ATECC508A-Datasheet-Summary.pdf",{"id":72,"by":73,"text":74},"11951421","zxcvgm","Nice! I initially wanted to build a similar device using just an ATtiny85 that speaks USB using USBtiny [1] or V-USB [2]. It would be low-cost but also not secure. Using a crypto…",{"value":76,"source":52,"evidence":77},"Silicon Labs EFM8 microcontroller",[78],{"id":79,"by":11,"text":80},"11953001","As the ATECC508A is just an I2C peripheral you still have a broad choice for microcontrollers (as you still need a U2F program and U2F). I choose to use a EFMUB1 from silicon labs.",{"value":82,"source":58,"evidence":83},"KiCad",[84,88],{"id":85,"by":86,"text":87},"11952395","StavrosK","This looks fantastic, and doubly so because it uses KiCAD, which I love.",{"id":89,"by":90,"text":91},"11951136","tomkinstinch","In addition to the vendors you mention via that link, OSH Park[1] is great option for hobbyists (or very small-volume production). This is the same source listed in OP. It's a…","open_source","launched","unknown",{"praise":96,"objections":109,"requests":136,"questions":151,"alternatives":166},[97,101],{"value":98,"source":58,"evidence":99},"Open source hardware design using KiCad is appreciated.",[100],{"id":85,"by":86,"text":87},{"value":102,"source":58,"evidence":103},"Cheap PCB fabrication makes DIY hardware practical.",[104,108],{"id":105,"by":106,"text":107},"11951101","CJKinni","My barrier to entry with a lot of DIY hardware projects was an incorrect assumption that it was difficult\u002Fexpensive to get PCBs made. Looking into this, I found the blog of the…",{"id":89,"by":90,"text":91},[110,125,132],{"value":111,"source":58,"evidence":112},"Bare PCB on a keychain will not survive long; a case or potting is needed.",[113,117,121],{"id":114,"by":115,"text":116},"11952264","aexaey","It would absolutely not survive for very long like this (naked PCB on a key-chain). Mechanical damage from the actual keys on the same chain is what will kill it before water,…",{"id":118,"by":119,"text":120},"11952514","mng2","I'd be very skeptical about that claim without substantial evidence of it surviving in the field. Especially if you use ROHS solder, which is more brittle than leaded solder.…",{"id":122,"by":123,"text":124},"11952508","nibnib","The tiny amount of lead involved is very unlikely to be harmful. You could probably safely eat the amount of solder used to assemble that board. I do think think a case is…",{"value":126,"source":58,"evidence":127},"Firmware in the secure element cannot be audited.",[128],{"id":129,"by":130,"text":131},"11951719","beagle3","It still has firmware, of course, which cannot be audited -- which makes it exactly as secure as a $40 Yubikey. Perhaps even a little more secure - because a Yubikey is…",{"value":133,"source":58,"evidence":134},"Durability claims lack field evidence.",[135],{"id":118,"by":119,"text":120},[137,144],{"value":138,"source":58,"evidence":139},"Use cross-vendor U2F udev rules instead of hardcoded device ids.",[140],{"id":141,"by":142,"text":143},"11950876","amluto","Linux users should use cross-vendor U2F support rather than hardcoding device ids into the udev rules: https:\u002F\u002Fgithub.com\u002Famluto\u002Fu2f-hidraw-policy",{"value":145,"source":58,"evidence":146},"Provide a working programmer link.",[147],{"id":148,"by":149,"text":150},"11952150","arviewer","The programmer link is not working. > The page isn't redirecting properly http:\u002F\u002Fwww.digikey.com\u002Fproduct-detail\u002Fen\u002Fsilicon-labs\u002FDEBUGADPTR1-USB\u002F336-1182-ND\u002F807653",[152,159],{"value":153,"source":58,"evidence":154},"How to back up data when the key cannot be copied.",[155],{"id":156,"by":157,"text":158},"11952349","tomohawk","I really like the idea of using a token like this, but how do you back up the data if the key is not copyable?",{"value":160,"source":58,"evidence":161},"Whether sidechannel attacks on U2F tokens have been published.",[162],{"id":163,"by":164,"text":165},"11950750","cwkoss","Very cool! Has anyone published any work on using sidechannel information to extract keys from U2F tokens?",[167,175],{"value":168,"source":58,"evidence":169},"Yubikey",[170,171],{"id":129,"by":130,"text":131},{"id":172,"by":173,"text":174},"11951605","zaroth","Is there anything written on why this is a valid choice for improving op-sec versus going with a commercial offering? Open source made from parts seems like it would be very much…",{"value":176,"source":58,"evidence":177},"Ledger U2F javacard",[178],{"id":179,"by":180,"text":181},"11950904","xaduha","Haven't tried it yet, but there is this for smartcards. Not sure if it will work with blank java cards, I mean they provide the cap file and source.…",{"comments":183,"answered":18,"key":184},6,[185,188,191],{"id":186,"text":187},"11958083","Thanks for the comments! I never thought of trying to do a reversible USB connection. And it's actually quite easy! The button you point out looks like a better choice. It's…",{"id":189,"text":190},"11953158","The keys used for the picture are not used. But yes it is not a good practice to post pictures of door keys.",{"id":192,"text":193},"11953025","It's a good question. It's definitely not been through years of testing yet but in the past few months me and some friends have had no problems. All of the parts have a low…",{"commenters":195,"max_depth":196,"maker_replies":183,"first_comment_mins":197,"lifespan_hours":198},60,7,16,34,[200,204,208,211,213,217,220,224,227,230,232,234,236,239,242,245,247,250,253,256,258,260,262,265,268,271,275,277,279,282,285,289,291,293,297,301,303,306,309,311,313,316,318,322,324,328,331,333,336,338,341,343,345,347,350,351,353,355,357,358,363,366,369,372,373,375,377,381,385,389,393,396,397,399,402,405,407,411,415,417,419,421,424,426,429,431,435,437,440,442,444,449],[201,41,31,202,203,41],"11951410","maker\u002Fpositive\u002Fnone","devy",[205,41,41,206,207,41],"11952410","commenter\u002Fneutral\u002Fnone","speps",[209,41,41,206,210,41],"11952545","Bromskloss",[212,41,41,206,203,41],"11954849",[214,41,47,215,216,41],"11952535","maker\u002Fneutral\u002Fnone","fasteo",[218,41,47,215,219,41],"11952771","Monkey0x9",[221,41,41,222,223,41],"11953088","other\u002Fneutral\u002Fnone","vollmond",[225,41,41,222,226,41],"11953738","Spooky23",[228,41,41,222,229,41],"11954782","dsl",[105,33,31,231,106,41],"maker\u002Fpositive\u002Fpricing",[89,33,41,233,90,41],"other\u002Fneutral\u002Fpricing",[235,33,41,233,173,41],"11951600",[237,33,41,233,238,41],"11951692","mplewis",[240,33,41,233,241,41],"11958828","lsllc",[243,33,41,233,244,41],"11952260","fho",[246,33,41,233,241,41],"11958824",[248,33,41,222,249,41],"11952337","lil1729",[251,33,41,222,252,41],"11952515","makomk",[254,33,41,222,255,41],"11953445","toomanybeersies",[257,33,41,222,249,41],"11959100",[259,33,41,222,249,41],"11959093",[61,33,47,261,62,41],"project\u002Fneutral\u002Fpricing",[263,33,41,264,86,41],"11952387","other\u002Fpositive\u002Fpricing",[266,33,41,222,267,41],"11952583","jabl",[269,33,41,233,270,41],"11952810","legulere",[272,33,41,273,274,41],"11957077","other\u002Fcritical\u002Fnone","janekm",[276,33,41,222,255,41],"11953429",[278,33,41,222,241,41],"11958842",[280,33,41,233,281,41],"11955173","jdietrich",[283,33,41,284,241,41],"11958834","other\u002Fpositive\u002Fnone",[286,39,47,287,288,41],"11955247","project\u002Fneutral\u002Fdesign","sowbug",[186,39,41,290,11,33],"maker\u002Fneutral\u002Fdesign",[292,39,47,287,288,41],"11958415",[294,47,33,295,296,41],"11952103","maker\u002Fcritical\u002Fprivacy","Loic",[298,47,41,299,300,41],"11952300","other\u002Fneutral\u002Fprivacy","05",[189,47,41,302,11,33],"maker\u002Fneutral\u002Fprivacy",[304,47,41,299,305,41],"11953192","the_mitsuhiko",[307,47,41,222,308,41],"11953244","mathgeek",[310,47,41,222,305,41],"11953264",[312,47,41,222,255,41],"11953414",[314,47,41,222,315,41],"11953943","JshWright",[317,47,41,222,281,41],"11955110",[319,47,41,320,321,41],"11959922","commenter\u002Fneutral\u002Fprivacy","sanderp",[141,18,47,323,142,41],"project\u002Fneutral\u002Fexecution",[325,31,47,326,327,41],"11952163","project\u002Fneutral\u002Fperformance","vog",[329,31,47,326,330,41],"11952219","DigitalJack",[114,31,33,332,115,41],"project\u002Fcritical\u002Fperformance",[334,31,47,287,335,41],"11952338","jacquesm",[337,31,41,222,86,41],"11952378",[339,31,41,222,340,41],"11952428","spacecowboy_lon",[342,31,41,222,335,41],"11952528",[344,31,41,222,86,41],"11952711",[346,31,41,222,335,41],"11956557",[348,31,41,222,349,41],"11952692","andrewwhartion",[118,31,33,332,119,41],[192,31,41,352,11,33],"project\u002Fpositive\u002Fperformance",[179,183,47,354,180,41],"project\u002Fneutral\u002Fidea",[72,196,31,356,73,41],"project\u002Fpositive\u002Fidea",[79,196,41,287,11,33],[359,360,33,361,362,41],"11951256",8,"project\u002Fcritical\u002Fdesign","badsock",[364,360,41,206,365,41],"11951350","i2pi",[367,360,47,287,368,41],"11951432","kbaker",[370,360,41,222,371,41],"11952435","sleepychu",[122,360,47,287,123,41],[163,34,47,374,164,41],"project\u002Fneutral\u002Fprivacy",[376,34,41,374,11,33],"11951054",[378,379,31,356,380,41],"11953233",10,"cdnsteve",[382,379,41,383,384,41],"11953534","commenter\u002Fneutral\u002Fpricing","j_s",[386,379,33,387,388,41],"11953791","project\u002Fcritical\u002Fpricing","camiller",[390,391,47,392,288,41],"11954902",11,"project\u002Fneutral\u002Fdocs",[394,395,47,392,142,41],"11950906",12,[69,395,41,287,11,33],[129,395,33,398,130,41],"project\u002Fcritical\u002Fprivacy",[400,395,33,361,401,41],"11951798","lucaspiller",[403,395,47,326,404,41],"11952155","iuguy",[406,395,47,374,142,41],"11954632",[408,409,41,222,410,41],"11951757",13,"rajeemcariazo",[412,409,47,413,414,41],"11952229","project\u002Fneutral\u002Fnone","Etheryte",[416,409,41,222,371,41],"11952440",[418,409,41,222,305,41],"11953230",[420,409,41,222,321,41],"11959965",[148,422,33,423,149,41],14,"project\u002Fcritical\u002Fdocs",[172,425,47,374,173,41],15,[427,425,41,320,428,41],"11952831","pjc50",[85,197,31,430,86,41],"project\u002Fpositive\u002Fdesign",[432,433,47,374,434,41],"11955944",17,"tinloaf",[436,433,47,392,434,41],"11955954",[156,438,47,439,157,41],18,"project\u002Fmixed\u002Fexecution",[441,438,47,323,428,41],"11952812",[443,438,47,323,130,41],"11952816",[445,446,33,447,448,41],"11954541",19,"project\u002Fcritical\u002Fexecution","a3r0",[450,451,47,287,371,41],"11952430",20,[],[454,459,464,468,473,477],{"id":455,"name":456,"points":457,"category":458},"11938405","fortran-machine",227,"languages",{"id":460,"name":461,"points":462,"category":463},"11918459","Trigger",164,"finance_crypto",{"id":465,"name":466,"points":467,"category":458},"11948955","huo",109,{"id":469,"name":470,"points":471,"category":472},"11947044","80,000 Hours career guide",93,"productivity",{"id":474,"name":475,"points":476,"category":458},"11940173","ViziCities 0.3",89,{"id":478,"name":479,"points":480,"category":481},"11916321","facebook-page-post-scraper",75,"data",false,"v2",{"id":485,"name":5,"line":6,"ai":482,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":486,"top":18,"kw":487,"maker":11,"domain":10,"tier":19,"attempts":41,"strip":488,"url":9,"mix":489,"praise":98,"objection":111,"sub":21},11950664,-0.05,[24,25,26,27],"5030500003000310000310013513333113015332",[31,32,33,34],1793990944224]