Bulwark Passkey
Security and privacy
passkeys and 2fa
SHOW HN2022
How HN took it
1 positive, 1 neutral or asking, 0 mixed, 2 critical, out of 4 comments about the project.
Idea: 1 for, 1 againstPrivacy: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Cool concept and a useful idea for secrets control
From 1 comment
This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I continue to use TOTP…
unqueued on HN
Objections
Not open source enough to audit; unaudited security device
From 1 comment
This is a very cool concept, however, (from the site:) > Can I see the source code? > Sure! Bulwark Passkey is built on top of an open source core called Virtual FIDO, which…
fire on HN
Passkeys merge possession and knowledge factors, weakening 2FA
From 1 comment
I appreciate the usefulness for websites that use a passwordless login; where WebauthN is the only means of authentication. However, having implemented WebauthN on various…
Freeaqingme on HN
Credentials can be copied out, less secure than hardware token
From 1 comment
Requests
Fully open source the frontend and security-critical code
From 1 comment
This is a very cool concept, however, (from the site:) > Can I see the source code? > Sure! Bulwark Passkey is built on top of an open source core called Virtual FIDO, which…
fire on HN
Import and export secrets to physical media
From 1 comment
This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I continue to use TOTP…
unqueued on HN
Questions
Does it work for platform authentication on Linux
From 1 comment
OMG this is why I currently can't use Linux. If your device can accept the "platform" mode of webauthn, I can go back to Linux. I currently have to use an app that only allows…
withinboredom on HN
Alternatives named
Yubikey hardware security keys
From 2 comments
This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I continue to use TOTP…
unqueued on HN> but it is entirely software based so you can sync credentials between devices. AFAIK one can flash a Yubikey with a specific AES key and make the Yubico backend aware of that…
mihaigalos on HN
Apple Passkeys
From 1 comment
I appreciate the usefulness for websites that use a passwordless login; where WebauthN is the only means of authentication. However, having implemented WebauthN on various…
Freeaqingme on HN
Keybase
From 1 comment
This is a really cool product! I'm so glad someone is finally trying to solve this problem. Not having control of your secrets is a big problem. It is why I continue to use TOTP…
unqueued on HN