[{"data":1,"prerenderedAt":193},["ShallowReactive",2],{"project-33790238":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":35,"aspects":36,"strip":39,"post_text":42,"what":43,"said":54,"maker_in_thread":117,"shape":125,"grid":129,"attempts":148,"same_week":156,"maker_shows":35,"maker_hidden":186,"reader_version":187,"card":188},"33790238","Bulwark Passkey","A virtual Yubikey-like device for 2FA or WebAuthN","title","Show HN: Bulwark Passkey – A virtual Yubikey-like device for 2FA or WebAuthN","https:\u002F\u002Fbulwark.id","bulwark.id","cmdli",1669741902,2022,29,8,1270,2570,50,"shown","security_privacy","passkeys and 2fa","desktop_app",[24,25,26,27,28],"passkey","webauthn","2fa","virtual yubikey","fido","quiet",null,{"positive":32,"neutral":32,"mixed":33,"critical":34},1,0,2,4,{"privacy":37,"idea":38},{"positive":33,"critical":32},{"positive":32,"critical":32},[32,33,40,33,33,32,41,33],5,3,"Hey y'all,\n\nThis is something I've been working on for a few months. It is a passkey system, similar to Apple Passkeys or a Yubikey, but it is entirely software based so you can sync credentials between devices.\n\nPasskeys (and FIDO devices in general) allow you to use public keys instead of passwords or codes to authenticate. For instance, you can just click \"Approve\" on the device\u002Fsoftware instead of having to copy a code, and there are no passwords to phish. This is a new piece of tech, so website support for logins are still limited, but it can currently be used for 2FA anywhere a Yubikey c",{"problem":44,"audience":30,"pricing":30,"motivation":30,"time_to_build":30,"stack":50,"openness":51,"stage":52,"team_size":53},{"value":45,"source":46,"evidence":47},"Phishable passwords and one-time codes for logins; hardware security keys are not synced.","maker",[48],{"id":49},"post",[],"open_source","beta","unknown",{"praise":55,"objections":64,"requests":83,"questions":92,"alternatives":100},[56],{"value":57,"source":58,"evidence":59},"Cool concept and a useful idea for secrets control","commenter",[60],{"id":61,"by":62,"text":63},"33797448","unqueued","This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I continue to use TOTP…",[65,72,79],{"value":66,"source":58,"evidence":67},"Not open source enough to audit; unaudited security device",[68],{"id":69,"by":70,"text":71},"33796857","fire","This is a very cool concept, however, (from the site:) > Can I see the source code? > Sure! Bulwark Passkey is built on top of an open source core called Virtual FIDO, which…",{"value":73,"source":58,"evidence":74},"Passkeys merge possession and knowledge factors, weakening 2FA",[75],{"id":76,"by":77,"text":78},"33798959","Freeaqingme","I appreciate the usefulness for websites that use a passwordless login; where WebauthN is the only means of authentication. However, having implemented WebauthN on various…",{"value":80,"source":46,"evidence":81},"Credentials can be copied out, less secure than hardware token",[82],{"id":49},[84,88],{"value":85,"source":58,"evidence":86},"Fully open source the frontend and security-critical code",[87],{"id":69,"by":70,"text":71},{"value":89,"source":58,"evidence":90},"Import and export secrets to physical media",[91],{"id":61,"by":62,"text":63},[93],{"value":94,"source":58,"evidence":95},"Does it work for platform authentication on Linux",[96],{"id":97,"by":98,"text":99},"33793119","withinboredom","OMG this is why I currently can't use Linux. If your device can accept the \"platform\" mode of webauthn, I can go back to Linux. I currently have to use an app that only allows…",[101,109,113],{"value":102,"source":58,"evidence":103},"Yubikey hardware security keys",[104,105],{"id":61,"by":62,"text":63},{"id":106,"by":107,"text":108},"33802644","mihaigalos","> but it is entirely software based so you can sync credentials between devices. AFAIK one can flash a Yubikey with a specific AES key and make the Yubico backend aware of that…",{"value":110,"source":58,"evidence":111},"Apple Passkeys",[112],{"id":76,"by":77,"text":78},{"value":114,"source":58,"evidence":115},"Keybase",[116],{"id":61,"by":62,"text":63},{"comments":34,"answered":34,"key":118},[119,122],{"id":120,"text":121},"33797140","That's a fair point. I would like to have the entire thing be open source for security purposes like you mentioned, but right now the frontend is built with TailwindUI, which is…",{"id":123,"text":124},"33824137","So, I look a closer look and it seems like TailwindUI does allow for building open source software, so I made the Bulwark Passkey repo public…",{"commenters":126,"max_depth":41,"maker_replies":34,"first_comment_mins":127,"lifespan_hours":128},7,221,54,[130,132,134,136,138,140,142,144],[69,33,32,131,70,33],"project\u002Fcritical\u002Fprivacy",[120,33,33,133,11,32],"maker\u002Fneutral\u002Fprivacy",[61,33,40,135,62,33],"project\u002Fpositive\u002Fidea",[123,33,33,137,11,32],"maker\u002Fpositive\u002Fprivacy",[106,32,33,139,107,33],"other\u002Fneutral\u002Fnone",[76,34,32,141,77,33],"project\u002Fcritical\u002Fidea",[97,41,41,143,98,33],"project\u002Fneutral\u002Fnone",[145,41,33,146,147,33],"33797622","commenter\u002Fneutral\u002Fnone","no_time",[149,152,153],{"id":150,"t":151,"points":35,"comments":33},"33778127",1669662834,{"id":4,"t":12,"points":14,"comments":15},{"id":154,"t":155,"points":34,"comments":34},"33925674",1670615213,[157,162,166,171,176,181],{"id":158,"name":159,"points":160,"category":161},"33795296","Wyldcard",1149,"games",{"id":163,"name":164,"points":165,"category":20},"33755016","stylometry",676,{"id":167,"name":168,"points":169,"category":170},"33764935","WebStickies",201,"productivity",{"id":172,"name":173,"points":174,"category":175},"33762743","MyNixOS",200,"infrastructure",{"id":177,"name":178,"points":179,"category":180},"33737258","FIFA Interactive Bracket",191,"consumer_social",{"id":182,"name":183,"points":184,"category":185},"33792643","SinglePage",175,"web_saas",false,"v2",{"id":189,"name":5,"line":6,"ai":186,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":30,"top":18,"kw":190,"maker":11,"domain":10,"tier":19,"attempts":41,"strip":191,"url":9,"mix":192,"praise":57,"objection":66,"sub":21},33790238,[24,25,26,27,28],"10500130",[32,32,33,34],1793991055725]