TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Everykey – The Master Key to Your Phone, Laptop, Website Accounts, and More

62 点作者 taivare超过 9 年前

14 条评论

pre超过 9 年前
From Hitchikers Guide To The Galaxy:<p>It was an Ident-i-Eeze, and was a very naughty and silly thing for Harl to have lying around in his wallet, though it was perfectly understandable. There were so many different ways in which you were required to provide absolute proof of your identity these days that life could easily become extremely tiresome just from that factor alone, never mind the deeper existential problems of trying to function as a coherent consciousness in an epistemologically ambiguous physical universe. Just look at cash point machines, for instance. Queues of people standing around waiting to have their fingerprints read, their retinas scanned, bits of skin scraped from the nape of the neck and undergoing instant (or nearly instant --- a good six or seven seconds in tedious reality) genetic analysis, then having to answer trick questions about members of their family they didn&#x27;t even remember they had, and about their recorded preferences for tablecloth colours. And that was just to get a bit of spare cash for the weekend. If you were trying to raise a loan for a jetcar, sign a missile treaty or pay an entire restaurant bill things could get really trying.<p>Hence the Ident-i-Eeze. This encoded every single piece of information about you, your body and your life into one all- purpose machine-readable card that you could then carry around in your wallet, and therefore represented technology&#x27;s greatest triumph to date over both itself and plain common sense.
评论 #11047244 未加载
nugget超过 9 年前
I don&#x27;t see how this is much different from key generation software running on a phone or any other device. Useful as a 2nd factor for authentication and a little less friction (more convenient, less secure). I&#x27;ve yet to see any technology that can replace an old fashioned master password as the 1st factor. All the hype around biometrics a few years ago seemed especially silly given that it&#x27;s pretty easy to steal fingerprints and once stolen, of course, they are pretty hard to change. Maybe I&#x27;m an outlier here but I think in 20 years we&#x27;ll still be using password managers with master password type in authentication into a dashboard with varying degrees of additional authentication required to access sites&#x2F;services within, based on relative sensitivity.
评论 #11045828 未加载
评论 #11045710 未加载
评论 #11045798 未加载
joshka超过 9 年前
So, since the original Kickstarter, FIDO and U2F came about. I can&#x27;t find anything that suggests that this has any relation to standards, or more technical detail rather than marketing. That&#x27;s worrying.
isomorphic超过 9 年前
The Everykey device holds a decryption key (or key-equivalent) for your keychains, and it has over-the-air <i>upgradeable</i> <i>firmware</i>? Even if the firmware is signed, and the upgrade procedure is password-protected, the feature may expose the device to a variety of different attacks.<p>(Not to mention hardware attacks, since even if the device has a secure element, it has to send key material back to the device with the keychain.)
volaski超过 9 年前
Is this actually really positively available right now? I don&#x27;t see any link to kickstarter or a preorder link or a video that says &quot;But now, we need your help&quot;. If so, it&#x27;s refreshing.
评论 #11045647 未加载
评论 #11045654 未加载
Eridrus超过 9 年前
One of the more surprising things to me is how few people use password managers. I know some companies buy 1Password for all their employees and less than half of their employees use it.<p>I really don&#x27;t understand why that is. I&#x27;ve always thought it was partly a pricing problem (which would be very bad for this $128 gadget), but when you&#x27;re company is providing it to you for free, that can&#x27;t be the reason you don&#x27;t use it.
rrebelo超过 9 年前
I am about to finish a more limited implementation of this idea for Android Wear smartwatches and Windows. It works by measuring bluetooth signal intensity (rssi).<p>I already made a prototype for Mac &amp; generic smartwatches [1], but if you have a Pebble you&#x27;ll have to disconnect the watch from the phone. Questions, criticism &amp; suggestions are welcome.<p>[1] <a href="https:&#x2F;&#x2F;www.gadgetish.com" rel="nofollow">https:&#x2F;&#x2F;www.gadgetish.com</a>
评论 #11046117 未加载
mmanfrin超过 9 年前
Hah -- in the demo animation, a gmail account comes up for John McAfee, one of the emails was from someone asking &#x27;How do I uninstall McAfee virus?&#x27;.
评论 #11046033 未加载
评论 #11047710 未加载
bravo22超过 9 年前
Neat idea but how would it protect against a relaying&#x2F;signal boost attack?
评论 #11049088 未加载
评论 #11046243 未加载
advaits超过 9 年前
The security group at the University of Cambridge has been working on a similar project for a few years now: <a href="https:&#x2F;&#x2F;mypico.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;mypico.org&#x2F;</a>
AdmiralAsshat超过 9 年前
Took me a sec watching the demo to realize that the person logging in is John McAfee.
_itsok超过 9 年前
Page took too long to load
smira7超过 9 年前
build yourself a honeypot! Today!
caleblloyd超过 9 年前
Isn&#x27;t this the same John McAfee who fled Belize in 2012 after some crazy situation that involved drugs, guns, and a murdered neighbor?<p>Not exactly the guy I want safeguarding my entire identity.<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;John_McAfee#Legal_issues" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;John_McAfee#Legal_issues</a>