conorpp

7 ms·

1.
Helping secure Binance Chain through responsible disclosure(jumpcrypto.com)
1 points by conorpp 4y ago|0 comments
2.
by conorpp 5y ago
Good points as to why we should move away from proof of work blockchains.
3.
by conorpp 5y ago
You could also say that the BTC/USD rate is proportional to the amount of interest...
4.
by conorpp 5y ago
Some problems I am excited about cryptocurrency fixing: - Sending money across borders. - Decentralized exchanges that actually charge fair fees, unlike the centralized exchanges of today. - Allowing more people to purchase goods online tha
5.
by conorpp 5y ago
Reminds me of an ongoing & heated debate about T. rex -- Did the T. rex have lips?
6.
Trussed – a new Rust framework for security chips that could replace JavaCard(trussed.dev)
27 points by conorpp 6y ago|2 comments
7.
by conorpp 6y ago
You are right, I lied a bit to oversimplify :)
8.
by conorpp 6y ago
Just wanted to add since I didn't see this covered in other comments yet -- TOTP and any sort of one time code authentication are just as phishable as passwords. Perhaps the biggest benefit for most people using U2F or FIDO2, is the l
9.
by conorpp 6y ago
The epoxy can't be physically removed without great risk of ripping off the electronics on the underlying circuit. The epoxy can be chemically dissolved, but would deteriorate the outside of the device as well. It the epoxy isn't
10.
FIDO2 security key company releases hardware that's open source and uses Rust(solokeys.com)
396 points by conorpp 6y ago|157 comments
11.
by conorpp 6y ago
To add to this, we would like to be able to run open source & update-able code and leverage EAL certified secure elements. Chips like the SE050 have recently come on the market and will likely end up on our products eventually.
12.
by conorpp 6y ago
New in V2: - More secure microcontroller supporting secure boot, PUF, flash encryption, etc. - Firmware rewritten in rust. - Much more robust and durable construction. - Touch buttons, reversible USB-A, USB-C NFC is passively operated simil
13.
FIDO2 security key company publishes results of internal security audit(blog.doyensec.com)
136 points by conorpp 7y ago|63 comments
14.
Trusting digital images to not be fake or altered(conorpp.com)
1 points by conorpp 7y ago|0 comments
15.
A survey of open and secure microcontrollers(conorpp.com)
2 points by conorpp 7y ago|0 comments
16.
Things you should definitely do when setting up a product line(conorpp.com)
1 points by conorpp 7y ago|0 comments
17.
Designing Somu, a tiny security key(conorpp.com)
3 points by conorpp 7y ago|0 comments
18.
by conorpp 8y ago
Hi There! I'm part of an open source based startup and we'd love to get some help with our web design. We sell physical FIDO2/U2F security keys, for strong authentication on the web. Soon to replace passwords! All firmware
19.
by conorpp 8y ago
Some bootloaders can be really simple. Here is one I wrote recently for my security key product (this particular code is for an ARM M3). https://github.com/SoloKeysSec/solo/blob/master/targets/efm3.
20.
by conorpp 8y ago
I agree, you could do this using more traditional methods, I just think leveraging a nice printing process could save some time/effort. Some other challenges that printing solves: 1. you can set the width of the jig to match your pogo
21.
by conorpp 8y ago
It'd be difficult to get all the holes lined up correctly
22.
by conorpp 8y ago
I think if we had a single chip solution, we could make it work, but since we're using 2 chips, it would be tight. I posted schematic in other comments. Maybe one "affordable" idea could be to stack 2 two-layer PCBs XD.
23.
by conorpp 8y ago
We'd love to make something small like the Yubikey Nano! Right now it'd be a bit tough, because to fit our chipset [1] in that tight space, it would likely involve making a custom IC package [2] or placing silicon die's direc
24.
by conorpp 8y ago
Tomu, being a ARM M0 core, might take some time to compute ECC signatures, but it is probably fine in practice. Our code is designed to be small and portable, so I think it could easily be run on the Tomu. Just need some work to change the
25.
by conorpp 8y ago
We are using the EFM8UB1 chip to implement the USB HID interface, then communicate with the SAM L11 via SPI. After considering many MCUs with USB interfaces, it seems to always be more cost effective to get the non-USB MCU and use the EFM8U
26.
Show HN: FIDO2 USB+NFC token optimized for security, extensibility, and style(github.com)
11 points by conorpp 8y ago|0 comments
27.
by conorpp 8y ago
Yes using a normal MCU for U2F is a bit of a compromise since EAL chips are unobtainium. So flash read protection is the main barrier to physical cloning methods. I'm not sure of any methods to bypass the read protection on normal MCU
28.
by conorpp 8y ago
This is a bit late, but the atecc508 does apply a random mask, see PrivWrite command in datasheet. http://ww1.microchip.com/downloads/en/DeviceDoc/20005927A.pd...
29.
by conorpp 8y ago
Yup it will be. I've actually been in touch with Dmitry, he came up with a nice backup solution. We were thinking about coming up with some sort of protocol so devices may initially be designated as this sort of backup.
30.
by conorpp 8y ago
Typically these keys are designed to be secure against remote attacks (i.e. adverse software on PC can't extract any secrets). If the attacker physically steals the key, he can just use it directly, no need for DPA. So protecting fro

More ›