News for hackers. Stuff that matters.

A comment on OnlyKey: Open-Source Alternative to YubiKey. Parent comment

Re:OnlyKey: Open-Source Alternative to YubiKey by delfinom on Thursday December 26, 2019 @10:01PM (#21888797)
> The hardware is transparent, literally, it has a clear protective coating on the hardware which allows visually verifying everything

Right and that's bullshit. How do I know you aren't embedding a advanced joule thiefing silicon die disguised as a pull-up resistor to manipulate usb communication or even interface with the micro in a backdoor?

[ Parent | on HN ]
Re:OnlyKey: Open-Source Alternative to YubiKey by stinos on Friday December 27, 2019 @04:04AM (#21890088)
How do I know

Fair question. But it makes me wonder: what would be the accepted way to provide schematics/PCBs and prove the provided ones are also what gets used to create the actually sold hardware? Same question for the source code actually.

[ Parent | on HN ]
Re:OnlyKey: Open-Source Alternative to YubiKey by thinkloop on Friday December 27, 2019 @04:09AM (#21890100)
I don't think humanity has been able to solve that problem. There's isn't an md5 checksum for hardware yet.
[ Parent | on HN ]