[{"data":1,"prerenderedAt":320},["ShallowReactive",2],{"project-3399781":3},{"id":4,"name":5,"line":5,"line_source":6,"title":7,"url":8,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":41,"post_text":43,"what":44,"said":48,"maker_in_thread":180,"shape":185,"grid":189,"attempts":280,"same_week":281,"maker_shows":39,"maker_hidden":312,"reader_version":313,"card":314},"3399781","Logging in with QR codes (proof of concept)","title","Show HN: Logging in with QR codes (proof of concept)","http:\u002F\u002Fblog.self.li\u002Fpost\u002F14864315302\u002Fqr-login","blog.self.li","legierski",1325081644,2011,86,39,135,1097,13,"notable","security_privacy","qr code authentication","web_app",[23,24,25,26],"qr code login","two-factor authentication","passwordless login","qr authentication","mixed",0.127,{"positive":30,"neutral":31,"mixed":32,"critical":32},6,8,3,20,{"privacy":35,"idea":38,"execution":40},{"positive":36,"critical":37},0,1,{"positive":30,"critical":39},2,{"positive":36,"critical":36},[37,32,36,32,36,36,32,42,36,36,36,36,36,42,36,36,42,36,42,32,32,32,32,37,36,36,32,32,32,32,42,37,36,36,36,36,36,36,42],5,null,{"problem":43,"audience":43,"pricing":43,"motivation":43,"time_to_build":43,"stack":45,"openness":46,"stage":47,"team_size":46},[],"unknown","prototype",{"praise":49,"objections":77,"requests":103,"questions":122,"alternatives":130},[50,70],{"value":51,"source":52,"evidence":53},"Interesting or neat concept","commenter",[54,58,62,66],{"id":55,"by":56,"text":57},"3400165","joshmanders","I like this concept and love what you showed using it. I just have no real practical use for it at the moment. Would love to see it being used though.",{"id":59,"by":60,"text":61},"3400131","sarbogast","Now that's a very interesting concept!",{"id":63,"by":64,"text":65},"3400457","coolk","brilliant thought!",{"id":67,"by":68,"text":69},"3400519","conradev","I like this idea. I don't think QR codes are being used to their full potential. The standard is definite for how to create QR codes, but I don't like how there are no written…",{"value":71,"source":52,"evidence":72},"Convenient for typing logins on mobile",[73],{"id":74,"by":75,"text":76},"3400067","citricsquid","I had this idea a few months back but didn't have any reason to develop it, I assume many others have done too and I would love to see it used. The basic use case for me was when…",[78,85,96],{"value":79,"source":52,"evidence":80},"Session cookies can be stolen by malware, so it does not fully secure login",[81],{"id":82,"by":83,"text":84},"3400720","peterwwillis","First of all: All modern malware\u002Fbotnets steal session cookies in real time and then log in and perform any automated task they're programmed to. All you're protecting is a…",{"value":86,"source":52,"evidence":87},"Scanning with a phone is slower than typing a short code",[88,92],{"id":89,"by":90,"text":91},"3402329","anonymous","I don't understand this obsession with QR codes. Why not just generate a short code and have the user type it in.",{"id":93,"by":94,"text":95},"3402340","zalew","first of all why would I have to grab my phone, unlock it and run a code scanner if I already have my hands on the keyboard? it makes totally no sense. qr codes are cool so you…",{"value":97,"source":52,"evidence":98},"Only a second factor, not a full replacement; lost phone needs a recovery path",[99],{"id":100,"by":101,"text":102},"3400601","spacemanaki","It would only work as a alternative (definitely a more convenient one) to something like Google's two factor auth app with one time passwords, not a complete replacement. If the…",[104,115],{"value":105,"source":52,"evidence":106},"Support as an OpenID provider",[107,111],{"id":108,"by":109,"text":110},"3401585","geon","Couldn't it be implemented as an Open ID provider?",{"id":112,"by":113,"text":114},"3402082","yuliyp","So you implemented OpenID using a phone instead of the third-party identity provider's web site?",{"value":116,"source":52,"evidence":117},"Use push notifications or public key authentication instead",[118],{"id":119,"by":120,"text":121},"3400730","FuzzyDunlop","That's what I thought. Implementing it without asking for extra info from the user might be troublesome if access to a phone's UDID is restricted (I think it is with Apple now?),…",[123],{"value":124,"source":52,"evidence":125},"Could it work as a second factor for two-factor authentication?",[126],{"id":127,"by":128,"text":129},"3400492","vilda","Actually it's even more interesting for two-factor authorization.",[131,142,150,154,162,173],{"value":132,"source":52,"evidence":133},"tiqr",[134,138],{"id":135,"by":136,"text":137},"3400149","leonderijke","There's an open source project called 'tiqr' which uses QR, combined with a PIN code, to log you in: https:\u002F\u002Ftiqr.org\u002F",{"id":139,"by":140,"text":141},"3402128","SyntaxPolice2","Great to see this discussion here. I'm the implementer of Animate Login, which is a similar, open source, QR Code authentication system. We're currently in discussions with the…",{"value":143,"source":52,"evidence":144},"Animate Login",[145,146],{"id":139,"by":140,"text":141},{"id":147,"by":148,"text":149},"3401882","sweis","I've seen at least three independent implementations of this idea. One is called Snap2Pass: http:\u002F\u002Fprpl.stanford.edu\u002Fpapers\u002Fsoups10j.pdf…",{"value":151,"source":52,"evidence":152},"Snap2Pass",[153],{"id":147,"by":148,"text":149},{"value":155,"source":52,"evidence":156},"Google Authenticator",[157,161],{"id":158,"by":159,"text":160},"3400434","zerostar07","So it's like Google Authenticator with qr codes?",{"id":100,"by":101,"text":102},{"value":163,"source":52,"evidence":164},"passtrust (kirubakaran)",[165,169],{"id":166,"by":167,"text":168},"3400695","nicholasreed","Paging kirubakran! He built a PoC with this exact same concept, but it is a chrome extension.",{"id":170,"by":171,"text":172},"3400909","kirubakaran","I guess I waited too long to post it on HN :-) It is at http:\u002F\u002Fwww.kirubakaran.com\u002Fpasstrust\u002F It has email confirmation on creation of the account (first log in) but I've…",{"value":174,"source":52,"evidence":175},"nomopass",[176],{"id":177,"by":178,"text":179},"3400913","gghootch","Moreover; it works without pairing your mobile device with every single service you want to connect with. See http:\u002F\u002Fwww.youtube.com\u002Fwatch?v=te_sgFo5wdo for more info.…",{"comments":37,"answered":36,"key":181},[182],{"id":183,"text":184},"3400199","I disagree. Going that way you can use pretty much any device with web browser to log into. Desktop, laptop, iPad or even your fridge, if it has browser built in.…",{"commenters":186,"max_depth":30,"maker_replies":37,"first_comment_mins":187,"lifespan_hours":188},32,82,15,[190,192,196,200,201,202,203,205,207,210,213,215,218,220,224,225,226,228,232,234,236,237,240,242,244,246,250,251,255,257,259,261,264,265,268,271,274,276,278],[82,36,37,191,83,36],"project\u002Fcritical\u002Fprivacy",[193,37,32,194,195,36],"3400047","project\u002Fneutral\u002Fidea","gvb",[197,37,36,198,199,36],"3400688","other\u002Fneutral\u002Fnone","hwatson",[139,39,32,194,140,36],[135,32,36,198,136,36],[177,32,36,198,178,36],[147,204,32,194,148,36],4,[74,42,42,206,75,36],"project\u002Fpositive\u002Fidea",[208,30,36,198,209,36],"3400556","adrianpike",[211,30,36,212,109,36],"3401581","commenter\u002Fneutral\u002Fnone",[214,30,36,212,209,36],"3401750",[216,30,36,212,217,36],"3401593","barlo",[219,30,36,212,209,36],"3401746",[221,222,42,206,223,36],"3400356",7,"porterhaney",[166,31,36,198,167,36],[170,31,36,198,171,36],[67,227,42,206,68,36],9,[229,230,36,198,231,36],"3401043",10,"rpledge",[127,233,42,206,128,36],11,[100,233,32,235,101,36],"project\u002Fmixed\u002Fidea",[119,233,32,235,120,36],[238,233,32,239,128,36],"3401986","project\u002Fneutral\u002Fexecution",[55,241,32,235,56,36],12,[89,17,37,243,90,36],"project\u002Fcritical\u002Fidea",[93,17,36,245,94,36],"commenter\u002Fcritical\u002Fidea",[247,248,36,198,249,36],"3401557",14,"danbmil99",[112,188,32,194,113,36],[252,253,32,194,254,36],"3400578",16,"pardner",[108,256,32,194,109,36],17,[158,258,32,194,159,36],18,[63,260,42,206,64,36],19,[262,33,37,243,263,36],"3400155","wavephorm",[183,33,36,245,10,37],[266,33,36,212,267,36],"3400509","missing_cipher",[269,33,36,270,263,36],"3401233","commenter\u002Fcritical\u002Fnone",[272,33,36,270,273,36],"3401454","georgemcbay",[275,33,36,270,263,36],"3401979",[277,33,36,270,273,36],"3402595",[59,279,42,206,60,36],21,[],[282,287,292,297,302,307],{"id":283,"name":284,"points":285,"category":286},"3401591","subpug",153,"productivity",{"id":288,"name":289,"points":290,"category":291},"3393167","FnordMetric",151,"data",{"id":293,"name":294,"points":295,"category":296},"3384133","Codecademy Labs",83,"learning_science",{"id":298,"name":299,"points":300,"category":301},"3393118","logger.conceptis.org \u002F logmon",58,"dev_tools",{"id":303,"name":304,"points":305,"category":306},"3393093","Daisy the Dinosaur",57,"languages",{"id":308,"name":309,"points":310,"category":311},"3391841","chat",47,"consumer_social",false,"v2",{"id":315,"name":5,"line":5,"ai":312,"cat":19,"year":12,"points":13,"comments":14,"rec":27,"s":316,"top":17,"kw":317,"maker":10,"domain":9,"tier":18,"attempts":36,"strip":318,"url":8,"mix":319,"praise":51,"objection":79,"sub":20},3399781,0.13,[23,24,25,26],"130300350000050050533331003333510000005",[30,31,32,32],1793990877373]