News for hackers. Stuff that matters.
Re:Finding vulnerable Twitter accounts with expired domains by cortesoft on Sunday August 23, 2020 @07:33PM (#24256215)
And when I lose that chip, or it is damaged or stolen?
Re:Finding vulnerable Twitter accounts with expired domains by g_p on Sunday August 23, 2020 @08:19PM (#24256466)
I guess the approaches taken with U2F tokens here (and FIDO2) makes sense - have more than one token enrolled, and allow either to be used.

It's not perfect and there are usability issues around this, but they're mostly solvable. Needing both keys around to enrol into each service can be an issue, but this could be addressed by letting a user enrol other public keys as a delegate, and present a signed delegation token allowing that token to enrol a public key on behalf of an off-site token.

Revocation is the next issue - how do you revoke either of your tokens if stolen or compromised? PKI had this issue and ended up down the CRL Vs OCSP approaches. Clearly you need to be able to revoke without the token being present (maybe storing a signed revocation for A on your B token), and some kind of gossip-based network to spread the signed revocation around. That might avoid centralising it.

As long as your "chip" is designed as an ISO smartcard, you can also rely on pin protection (I'll ignore the implanted under skin aspect, other than to observe that does adjust the threat model as deniability around knowing the PIN is lost at that point. A duress PIN that validly unlocks but generates different keys would be a potential solution here for where mistaken identity can be used as an escape from an adversary).

Re:Finding vulnerable Twitter accounts with expired domains by cortesoft on Sunday August 23, 2020 @11:15PM (#24257263)
Yeah, I just can't see getting my 75 year old dad to be able to use a system like that.
Re:Finding vulnerable Twitter accounts with expired domains by g_p on Monday August 24, 2020 @05:31AM (#24258901)
Agreed, although most of this will end up wrapped up into the token and system itself, I suspect.

U2F is pretty much a "key" (some even visually looking like keys) that are used pretty much like a physical key - put the key into the keyhole (USB port), and press the flashing light. Done.

That level of UX is what we all need to build towards!

Re:Finding vulnerable Twitter accounts with expired domains by twicetwice on Monday August 24, 2020 @12:01AM (#24257428)
Well, lost or stolen hopefully wouldn't happen if it's embedded in my hand—that's the point of embedding it in my hand!

To protect against damage—which is a very real possibility, of course—I'd put identical chips in each hand, and if one fails or gets damaged, then you'd have to rotate keys by replacing both chips.

And you could have a third identical chip/key (or a different private key on another device in a safe somewhere) as a further backup, as my sibling comment recommends.

Re:Finding vulnerable Twitter accounts with expired domains by Moru on Monday August 24, 2020 @01:20AM (#24257715)
I prefer losing the keys to my email than to lose my hand because someone wants to empty my bank account.
Re:Finding vulnerable Twitter accounts with expired domains by twicetwice on Tuesday August 25, 2020 @12:35AM (#24268148)
I'm not really conerned about that scenario, to be honest.