[{"data":1,"prerenderedAt":571},["ShallowReactive",2],{"project-32881956":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":46,"post_text":49,"what":50,"said":84,"maker_in_thread":164,"shape":173,"grid":177,"attempts":531,"same_week":532,"maker_shows":43,"maker_hidden":563,"reader_version":564,"card":565},"32881956","virtual-fido","A virtual Yubikey device for 2FA\u002FWebAuthN","title","Show HN: A virtual Yubikey device for 2FA\u002FWebAuthN","https:\u002F\u002Fgithub.com\u002Fbulwarkid\u002Fvirtual-fido","github.com","cmdli",1663451525,2022,166,138,364,2570,15,"notable","security_privacy","virtual security keys","library",[24,25,26,27,28],"webauthn","fido2","virtual yubikey","2fa","passkeys","roasted",-0.259,{"positive":32,"neutral":33,"mixed":34,"critical":35},10,7,1,18,36,{"idea":38,"privacy":41,"execution":44,"docs":45},{"positive":39,"critical":40},9,13,{"positive":42,"critical":43},0,4,{"positive":34,"critical":34},{"positive":42,"critical":42},[34,34,47,42,42,42,47,43,42,42,34,34,42,42,42,42,42,42,42,42,34,42,42,42,42,42,48,42,34,47,42,47,47,43,48,34,34,34,34,34],5,3,null,{"problem":51,"audience":49,"pricing":49,"motivation":61,"time_to_build":49,"stack":65,"openness":81,"stage":82,"team_size":83},{"value":52,"source":53,"evidence":54},"Provides a software FIDO2\u002FWebAuthn authenticator without a physical hardware key","maker",[55,58],{"id":56,"by":11,"text":57},"32882624","Author here. The credentials are encrypted on-disk with a passphrase, so it wouldn't be trivial extract them, but yes it would be somewhat less secure than a hardware device. I…",{"id":59,"by":11,"text":60},"32882361","Personally, I prefer the \"approval\" process of YubiKey\u002FU2F devices over having to enter a code, but I also dislike having to have a hardware device on me at all times. Also, with…",{"value":62,"source":53,"evidence":63},"Find a middle ground between hardware keys and weak password options",[64],{"id":56,"by":11,"text":57},[66,74],{"value":67,"source":68,"evidence":69},"Go","commenter",[70],{"id":71,"by":72,"text":73},"32892452","kenshaw","Thanks, appreciate the package. I submitted a PR as I was also looking for a Go package similar to this, and wanted to make using this as a library a bit easier. I plan on using…",{"value":75,"source":68,"evidence":76},"USB\u002FIP",[77],{"id":78,"by":79,"text":80},"32882769","pabs3","Why not use the Linux USB gadget stuff, instead of USB over IP? With the dummy_hcd Linux kernel module you can attach virtual gadgets locally. I guess you still need USB\u002FIP for…","open_source","prototype","unknown",{"praise":85,"objections":97,"requests":117,"questions":129,"alternatives":141},[86],{"value":87,"source":68,"evidence":88},"Fantastic, smart approach to a real problem",[89,93],{"id":90,"by":91,"text":92},"32885214","d0ublespeak","I think this is really cool and a smart way to approach this problem. That being said, the physical isolation of the YubiKey is what makes it useful. Having to physically press a…",{"id":94,"by":95,"text":96},"32882418","stavros","This is fantastic. Did you make this, cmdii? Why does it need to persist files locally? I thought that all that's necessary is the key. Is it for resident keys? I'd like a…",[98,113],{"value":99,"source":68,"evidence":100},"Less secure than hardware keys since keys are stored on the computer",[101,105,109],{"id":102,"by":103,"text":104},"32882623","ivanhoe","This sort of defeats the idea of 2FA, doesn't it? If it's implemented as a software service on the same device, it's (well theoretically at least) hackable at the same time as…",{"id":106,"by":107,"text":108},"32882512","askvictor","Wouldn't this reduce security considerably, for the scenario where the computer is compromised?",{"id":110,"by":111,"text":112},"32915486","1970-01-01","The entire point of something you have is that it's physical and can't be copied. This isn't something you have, it's something you know with multiple layers of obscurity on top…",{"value":114,"source":68,"evidence":115},"Physical button press isolation is what makes a YubiKey useful",[116],{"id":90,"by":91,"text":92},[118,125],{"value":119,"source":68,"evidence":120},"Touch ID or Secure Enclave backed virtual key",[121],{"id":122,"by":123,"text":124},"32882488","hamandcheese","All I want is to be able to use Touch ID for services that only support Yubikey. At my workplace this means Duo - they have Touch ID support, but only in Chrome! In Safari or…",{"value":126,"source":68,"evidence":127},"Passphrase-derived FIDO2 key",[128],{"id":94,"by":95,"text":96},[130,137],{"value":131,"source":68,"evidence":132},"Who is this for and is there a real requirement for these devices?",[133],{"id":134,"by":135,"text":136},"32882309","lddemi","Fun demo but who is this really for? Is there a requirement for these devices anywhere aside from corporate security?",{"value":138,"source":68,"evidence":139},"Why does it persist files locally?",[140],{"id":94,"by":95,"text":96},[142,153,157],{"value":143,"source":68,"evidence":144},"Passkeys on Apple, Microsoft and Android",[145,149],{"id":146,"by":147,"text":148},"32934057","mandrizzle","Apple, Microsoft, and Android support passkeys. They seem like a much better solution yubi keys",{"id":150,"by":151,"text":152},"32882743","psanford","Nice! I'm the author of tpm-fido[1] which is similar to this but with some different goals. It looks like you've implemented ctap2, which has been on my todo list for tpm-fido…",{"value":154,"source":68,"evidence":155},"tpm-fido",[156],{"id":150,"by":151,"text":152},{"value":158,"source":68,"evidence":159},"YubiKey hardware keys",[160],{"id":161,"by":162,"text":163},"32887244","talkingtab","This is my problem with fido\u002Fyubikey's and WebAuthN, etc. Somehow Fido and Yubikey have become intermixed and conflated. Like kleenex - one brand of facial tissue has become the…",{"comments":43,"answered":43,"key":165},[166,169,172],{"id":167,"text":168},"32882457","Yup, I built this. The file storage is only for the FIDO2\u002FWebAuthN device, which generates large private keys for each credential; the U2F device keys are small enough that they…",{"id":170,"text":171},"32882639","Each credential has its own private key which is signed by the device's private key for certification. I am uncertain if the FIDO2 spec says how those private keys need to be…",{"id":59,"text":60},{"commenters":174,"max_depth":39,"maker_replies":43,"first_comment_mins":175,"lifespan_hours":176},79,49,134,[178,180,183,187,190,192,196,199,203,206,210,213,217,220,222,225,228,231,234,237,239,241,244,247,249,252,255,256,258,261,264,267,270,273,276,279,282,283,286,288,291,294,297,299,302,304,306,308,310,313,315,318,320,322,324,327,329,332,334,337,340,342,345,347,349,351,353,355,358,360,362,364,367,370,373,375,378,381,384,387,390,393,396,399,401,404,407,409,412,414,416,419,423,426,428,430,433,435,437,440,442,445,447,449,451,454,457,459,462,464,466,468,471,473,475,476,479,480,482,485,487,488,491,494,497,500,501,503,505,507,510,513,515,517,518,522,524,528],[102,42,34,179,103,42],"project\u002Fcritical\u002Fidea",[181,42,34,179,182,42],"32882650","gruez",[184,42,42,185,186,42],"32882719","other\u002Fneutral\u002Fnone","cube2222",[188,42,34,179,189,42],"32882806","mjg59",[191,42,34,179,182,42],"32882872",[193,42,42,194,195,42],"32886706","commenter\u002Fcritical\u002Fidea","alrlroipsp",[197,42,42,185,198,42],"32898001","winnie_ua",[200,42,42,201,202,42],"32883222","commenter\u002Fneutral\u002Fidea","Anunayj",[204,42,42,185,205,42],"32885162","vertis",[207,42,47,208,209,42],"32883886","project\u002Fpositive\u002Fidea","userbinator",[211,42,42,185,212,42],"32885569","gitgud",[214,42,42,215,216,42],"32885607","commenter\u002Fneutral\u002Fnone","tzmudzin",[218,42,42,215,219,42],"32885676","jbverschoor",[221,42,42,215,216,42],"32885706",[223,42,42,215,224,42],"32886307","gryn",[226,42,42,185,227,42],"32887430","xani_",[229,42,42,185,230,42],"32886432","kevincox",[232,42,42,185,233,42],"32887106","oneplane",[235,42,42,215,236,42],"32887583","pas",[238,42,42,194,216,42],"32888590",[240,42,42,215,236,42],"32910508",[242,42,42,185,243,42],"32883895","racingmars",[245,42,48,246,227,42],"32887420","project\u002Fmixed\u002Fidea",[248,42,47,208,103,42],"32887532",[250,42,47,208,251,42],"32890528","jeffalyanak",[253,42,34,254,198,42],"32897945","project\u002Fcritical\u002Fprivacy",[150,34,47,208,151,42],[161,257,42,185,162,42],2,[259,257,42,185,260,42],"32887322","sbdncuvh",[262,257,42,185,263,42],"32887940","rzzzt",[265,257,42,185,266,42],"32887333","UncleEntity",[268,257,42,185,269,42],"32887954","azornathogron",[271,257,42,185,272,42],"32887999","Sephr",[274,257,42,185,275,42],"32888053","nickzana",[277,257,42,185,278,42],"32888324","tialaramex",[280,257,42,185,281,42],"32891367","jeroenhd",[90,48,34,179,91,42],[284,48,42,215,285,42],"32885472","lazka",[287,48,42,215,230,42],"32886410",[289,43,34,179,290,42],"32882308","iudqnolq",[292,43,42,185,293,42],"32882333","warent",[295,43,42,185,296,42],"32882404","TrueGeek",[298,43,42,185,290,42],"32882461",[300,43,42,185,301,42],"32882657","bb88",[303,43,42,185,107,42],"32882450",[305,43,42,215,290,42],"32882538",[307,43,42,215,107,42],"32882589",[309,43,42,185,301,42],"32882627",[311,43,42,215,312,42],"32882458","dilyevsky",[314,43,42,185,301,42],"32882619",[316,43,42,185,317,42],"32882753","smeej",[319,43,42,185,301,42],"32882927",[321,43,42,215,103,42],"32882363",[323,43,42,215,290,42],"32882430",[325,43,42,185,326,42],"32882470","akerl_",[328,43,42,215,290,42],"32882550",[330,43,42,215,331,42],"32882647","jklfhfyhjlo",[333,43,42,215,326,42],"32882678",[335,43,42,336,290,42],"32884429","commenter\u002Fpositive\u002Fnone",[338,43,42,185,339,42],"32884175","yellow_postit",[341,43,42,215,216,42],"32885511",[343,43,42,215,344,42],"32886059","oezi",[346,43,42,201,123,42],"32882447",[348,43,42,201,290,42],"32882483",[350,43,42,201,123,42],"32882573",[352,43,42,215,290,42],"32882597",[354,43,42,201,123,42],"32882971",[356,43,42,201,357,42],"32883726","snadal",[359,43,42,201,123,42],"32883942",[361,43,42,201,227,42],"32887497",[363,43,34,179,357,42],"32950866",[365,43,42,201,366,42],"32884578","clhodapp",[368,43,42,369,281,42],"32886433","other\u002Fneutral\u002Fidea",[371,43,42,215,372,42],"32882504","traceroute66",[374,43,42,215,290,42],"32882569",[376,43,42,215,377,42],"32882637","LelouBil",[379,43,42,215,380,42],"32882715","wyager",[382,43,42,185,383,42],"32882728","themagician",[385,43,42,215,386,42],"32888912","waynesonfire",[388,43,42,215,389,42],"32882782","nick__m",[391,43,42,215,392,42],"32884230","turdnagel",[394,43,42,215,395,42],"32884478","InvaderFizz",[397,43,42,215,398,42],"32884803","weichweich",[400,43,42,215,392,42],"32902153",[402,43,42,215,403,42],"32884808","taubek",[405,43,42,215,406,42],"32885495","loulouxiv",[408,43,42,215,403,42],"32886621",[410,43,42,215,411,42],"32887014","sig-io",[413,43,42,215,389,42],"32905905",[415,43,42,215,147,42],"32934025",[417,43,42,215,418,42],"32883115","Ferret7446",[420,43,48,421,422,42],"32884964","project\u002Fneutral\u002Fidea","5d8767c68926",[424,43,42,215,425,42],"32885009","Semaphor",[427,43,42,215,422,42],"32885787",[429,43,42,215,205,42],"32885219",[431,43,42,215,432,42],"32885645","ranguna",[434,43,42,215,227,42],"32887465",[436,43,42,215,386,42],"32888727",[438,47,34,179,439,42],"32882571","crazysim",[441,47,42,215,151,42],"32882764",[443,47,42,215,444,42],"32884562","Lucent",[122,446,47,208,123,42],6,[448,446,42,215,372,42],"32882519",[450,446,42,215,123,42],"32882557",[452,446,42,215,453,42],"32882596","toomuchtodo",[455,33,42,215,456,42],"32883465","jrm4",[458,33,47,208,79,42],"32884316",[460,33,42,215,461,42],"32884884","computerfriend",[463,33,42,215,79,42],"32907339",[465,33,47,208,456,42],"32889669",[467,33,42,215,79,42],"32911652",[94,469,47,470,95,42],8,"maker\u002Fpositive\u002Fidea",[167,469,42,472,11,34],"maker\u002Fneutral\u002Fexecution",[474,469,47,470,95,42],"32882502",[170,469,42,472,11,34],[477,469,48,478,95,42],"32882741","maker\u002Fneutral\u002Fidea",[78,39,48,472,79,42],[481,32,48,421,79,42],"32882796",[71,483,47,484,72,42],11,"project\u002Fpositive\u002Fexecution",[134,486,34,179,135,42],12,[59,486,42,478,11,34],[489,486,34,179,490,42],"32882376","altairprime",[492,486,42,215,493,42],"32882787","postalrat",[495,486,48,421,496,42],"32882416","dspillett",[498,486,48,421,499,42],"32882460","convolvatron",[110,40,34,179,111,42],[106,502,34,254,107,42],14,[56,502,42,504,11,34],"maker\u002Fneutral\u002Fprivacy",[506,502,34,179,79,42],"32884382",[508,502,34,254,509,42],"32882651","jabbany",[511,502,42,512,189,42],"32882819","commenter\u002Fneutral\u002Fprivacy",[514,502,34,254,509,42],"32917506",[516,502,42,215,227,42],"32887524",[146,18,34,179,147,42],[519,520,42,369,521,42],"32887873",16,"alberth",[523,520,42,369,281,42],"32891417",[525,526,48,527,386,42],"32888374",17,"project\u002Fneutral\u002Fdocs",[529,35,34,530,79,42],"32884320","maker\u002Fcritical\u002Fexecution",[],[533,538,543,548,553,558],{"id":534,"name":535,"points":536,"category":537},"32884467","Dog Bunny Puzzle",1859,"games",{"id":539,"name":540,"points":541,"category":542},"32905802","Figr.app",275,"productivity",{"id":544,"name":545,"points":546,"category":547},"32894429","Stalwart JMAP",190,"infrastructure",{"id":549,"name":550,"points":551,"category":552},"32879848","LambdaLisp",189,"languages",{"id":554,"name":555,"points":556,"category":557},"32852478","WunderBase",179,"data",{"id":559,"name":560,"points":561,"category":562},"32898679","DevTools-X",136,"dev_tools",false,"v2",{"id":566,"name":5,"line":6,"ai":563,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":567,"top":18,"kw":568,"maker":11,"domain":10,"tier":19,"attempts":42,"strip":569,"url":9,"mix":570,"praise":87,"objection":99,"sub":21},32881956,-0.26,[24,25,26,27,28],"1150005400110000000010000030150554311111",[32,33,34,35],1794036625183]