[{"data":1,"prerenderedAt":320},["ShallowReactive",2],{"project-15853345":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":42,"post_text":43,"what":44,"said":54,"maker_in_thread":142,"shape":151,"grid":156,"attempts":281,"same_week":282,"maker_shows":33,"maker_hidden":312,"reader_version":313,"card":314},"15853345","SeKey","An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust","title","Show HN: SeKey: An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust","https:\u002F\u002Fgithub.com\u002Fntrippar\u002Fsekey","github.com","ntrippar",1512494533,2017,169,49,215,2242,10,"notable","security_privacy","ssh agent","cli",[21,24,25,26,27],"secure enclave","touch id","macos","rust","curious",-0.017,{"positive":31,"neutral":32,"mixed":33,"critical":34},3,9,1,5,18,{"idea":37,"execution":38,"design":40,"privacy":41},{"positive":33,"critical":33},{"positive":33,"critical":39},0,{"positive":39,"critical":31},{"positive":39,"critical":33},[39,39,39,39,39,39,39,39,39,39,39,39,34,39,39,39,33,34,31,39,31,31,31,33,39,39,33,31,31,31,33,31,39,34,33,39,39,39,39,39],null,{"problem":43,"audience":43,"pricing":43,"motivation":43,"time_to_build":43,"stack":45,"openness":52,"stage":53,"team_size":53},[46],{"value":47,"source":48,"evidence":49},"Rust","maker",[50],{"id":51},"post","open_source","unknown",{"praise":55,"objections":68,"requests":86,"questions":108,"alternatives":120},[56],{"value":57,"source":58,"evidence":59},"Cool, well-executed project","commenter",[60,64],{"id":61,"by":62,"text":63},"15857061","arete","Awesome work, this is a really cool idea and well executed.",{"id":65,"by":66,"text":67},"15858055","_hyn3","Very, very cool. To use a public key with something like Userify (https:\u002F\u002Fuserify.com, plug ssh key management) or a service like Github, use --export-key to export the public…",[69,79],{"value":70,"source":48,"evidence":71},"Secure Enclave cannot import pre-existing keys, so keys cannot be backed up",[72,75],{"id":73,"by":11,"text":74},"15855367","it's SE limitation :(. also makes me sad, will be awesome if you can import a key generated by yourself. so if you reinstall you can import again to the enclave",{"id":76,"by":77,"text":78},"15855332","viraptor","> Can’t import preexisting key That makes me sad :( Does anyone know if that's a SE limitation, or the app's?",{"value":80,"source":58,"evidence":81},"Hardware-based secure enclaves could leak keys if the manufacturer is malicious",[82],{"id":83,"by":84,"text":85},"15854116","galadran","I'm amazed there's a market for this kind of thing. Since the 1990s its been known how to implement an undetectable backdoor in hardware based crypto which leaks your keys to an…",[87,94,101],{"value":88,"source":58,"evidence":89},"Support for preexisting keys",[90],{"id":91,"by":92,"text":93},"15858253","froderick","This looks useful. I'd love to use this with gopass (https:\u002F\u002Fgithub.com\u002Fjustwatchcom\u002Fgopass). It would have to support preexisting keys for that to work for me. I wonder if the…",{"value":95,"source":58,"evidence":96},"U2F device support",[97],{"id":98,"by":99,"text":100},"15856298","epistasis","I would love to see this usable as a U2F device too.",{"value":102,"source":58,"evidence":103},"PIN support alongside biometric auth",[104],{"id":105,"by":106,"text":107},"15854305","falcolas","Very cool project. I’ve done similar things with yubikeys before, having it built into the hardware is great. Can it also support a pin to go with the biometric auth?",[109,116],{"value":110,"source":58,"evidence":111},"Can keys be backed up or exported?",[112],{"id":113,"by":114,"text":115},"15856082","DennisP","Is there a way to back up your keys? If not it could be a problem to lose your laptop.",{"value":117,"source":58,"evidence":118},"Does it support elliptic curve keys beyond the current type?",[119],{"id":91,"by":92,"text":93},[121,128,135],{"value":122,"source":58,"evidence":123},"Kyptonite (krypt.co)",[124],{"id":125,"by":126,"text":127},"15854752","nyolfen","see also the really excellent kyptonite, which i found linked here a few months ago and i've been positively delighted with: https:\u002F\u002Fkrypt.co\u002F i'm not a security expert, and i…",{"value":129,"source":58,"evidence":130},"YubiKey holding SSH keys",[131],{"id":132,"by":133,"text":134},"15868770","gdamjan1","a yubikey can hold your private ssh key, and it can't be taken out of it",{"value":136,"source":58,"evidence":137},"simple-tpm-pk11 for TPMs",[138],{"id":139,"by":140,"text":141},"15854664","floatboth","For TPMs on non-Apple computers: https:\u002F\u002Fgithub.com\u002FThomasHabets\u002Fsimple-tpm-pk11 But with TPM there's no external unlock mechanism like Touch ID, the TPM unlock happens from the…",{"comments":31,"answered":31,"key":143},[144,147,150],{"id":145,"text":146},"15856520","thats because the code signing its invalid. you are signing the whole app? or only the binary. could be many reasons, one is the lack of the provisioning profile on your computer…",{"id":148,"text":149},"15854401","as far i read in the documentation no. i will do more research on the implementation. also you device has to be unlocked for the enclave to work.…",{"id":73,"text":74},{"commenters":152,"max_depth":153,"maker_replies":31,"first_comment_mins":154,"lifespan_hours":155},31,6,59,40,[157,159,163,166,168,171,175,178,180,184,187,190,192,194,196,200,202,204,206,208,210,212,214,218,220,223,225,227,229,232,233,237,240,243,244,246,248,250,253,256,258,261,263,266,268,271,273,276,278],[125,39,39,158,126,39],"other\u002Fneutral\u002Fnone",[160,39,39,161,162,39],"15855850","other\u002Fneutral\u002Fprivacy","srcmap",[164,39,39,158,165,39],"15856050","samat",[167,39,39,158,66,39],"15857829",[169,39,39,161,170,39],"15856239","staplers",[172,39,39,173,174,39],"15857115","commenter\u002Fneutral\u002Fprivacy","matthewmacleod",[176,39,39,173,177,39],"15857589","comex",[179,39,39,161,170,39],"15862341",[181,39,39,182,183,39],"15858182","commenter\u002Fneutral\u002Fnone","djrogers",[185,39,39,161,186,39],"15858456","feelin_googley",[188,39,39,182,189,39],"15858492","voltagex_",[191,39,39,182,186,39],"15858614",[193,39,39,161,170,39],"15862356",[195,39,39,158,186,39],"15862696",[197,39,34,198,199,39],"15857471","project\u002Fpositive\u002Fidea","pvg",[201,39,39,161,162,39],"15857923",[203,39,39,182,199,39],"15858114",[205,39,39,161,126,39],"15858597",[207,39,39,161,177,39],"15857623",[132,39,33,209,133,39],"project\u002Fcritical\u002Fidea",[65,33,34,211,66,39],"project\u002Fpositive\u002Fexecution",[139,213,39,158,140,39],2,[215,31,31,216,217,39],"15856479","project\u002Fneutral\u002Fexecution","abhv",[145,31,39,219,11,33],"maker\u002Fneutral\u002Fexecution",[91,221,31,222,92,39],4,"project\u002Fmixed\u002Fidea",[98,34,31,224,99,39],"project\u002Fneutral\u002Fidea",[105,153,31,226,106,39],"project\u002Fneutral\u002Fdesign",[148,153,39,228,11,33],"maker\u002Fneutral\u002Fdesign",[76,230,33,231,77,39],7,"project\u002Fcritical\u002Fdesign",[73,230,39,228,11,33],[234,230,39,235,236,39],"15855643","commenter\u002Fneutral\u002Fdesign","tedchs",[238,230,33,231,239,39],"15856427","0culus",[241,230,31,226,242,39],"15855990","raphaeljlps",[113,230,31,226,114,39],[245,230,31,226,77,39],"15856151",[247,230,31,224,114,39],"15856377",[249,230,33,231,77,39],"15856179",[251,230,31,226,252,39],"15857390","conradev",[254,230,31,226,255,39],"15856273","timdorr",[257,230,39,235,77,39],"15856406",[61,259,34,260,62,39],8,"project\u002Fpositive\u002Fnone",[83,32,33,262,84,39],"project\u002Fcritical\u002Fprivacy",[264,32,39,182,265,39],"15854262","jmileham",[267,32,39,173,84,39],"15854378",[269,32,39,182,270,39],"15854995","hateduser2",[272,32,39,173,106,39],"15854274",[274,32,39,182,275,39],"15857848","thisacctforreal",[277,32,39,182,199,39],"15854587",[279,32,39,173,280,39],"15856341","geofft",[],[283,288,293,298,303,307],{"id":284,"name":285,"points":286,"category":287},"15860312","Classical Music Only",273,"consumer_social",{"id":289,"name":290,"points":291,"category":292},"15851927","Misocoin",151,"learning_science",{"id":294,"name":295,"points":296,"category":297},"15865195","flu.io",140,"web_saas",{"id":299,"name":300,"points":301,"category":302},"15843738","Go Freaking Do It",128,"finance_crypto",{"id":304,"name":305,"points":306,"category":287},"15847575","Echo Podcasts",116,{"id":308,"name":309,"points":310,"category":311},"15831132","Freeciv WebGL 3D",105,"games",false,"v2",{"id":315,"name":5,"line":6,"ai":312,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":316,"top":18,"kw":317,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":318,"url":9,"mix":319,"praise":57,"objection":70,"sub":21},15853345,-0.02,[21,24,25,26,27],"0000000000005000153033310013331305100000",[31,32,33,34],1794036561414]