Launch HN: Keyri (YC S21) – Secure smartphone-based passwordless authentication

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by thekeyper on Wednesday August 04, 2021 @04:46PM (#28066084)

Nail on the head. That's the problem that the secret sauce solves. Without going too much in to it (because I don't think it's a very defensible moat at the moment), the phone sees stuff on the screen other than the QR code, which bad actors cannot present to victims.

[ Parent | on HN ]

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by qzw on Wednesday August 04, 2021 @06:34PM (#28067320)

So are you saying that even if the bad actors found out how the secret sauce works, they would not be able to spoof a legit page? In other words, is the obscurity in the CV part purely for competitive reasons, or does it also serve a security purpose?

[ Parent | on HN ]

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by thekeyper on Wednesday August 04, 2021 @06:41PM (#28067401)

Yes, even if bad actors figured out the secret sauce, they couldn't defeat it easily. It's possible, but if they hack you the way they'd have to hack you in order to defeat our CV element, you'd have much bigger problems to worry about. So yes, the lack of disclosure is for competitive reasons, not for security purposes.

[ Parent | on HN ]