News for hackers. Stuff that matters.

A comment on Launch HN: Keyri (YC S21) – Secure smartphone-based passwordless authentication. Parent comment

Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by e12e on Wednesday August 04, 2021 @11:34PM (#28069551)
>> Is the key protected by passphrases?

> Yes, developers can enable securing the keys with a user-set 4-digit PIN that the user must input upon key recovery. This is optional for developers

Is this rate limited by the phone for access to the secret key?

[ Parent | on HN ]
Re:Launch HN: Keyri (YC S21) – Secure smartphone-based passw... by thekeyper on Wednesday August 04, 2021 @11:51PM (#28069666)
Yes, when developers enable passcode protection, the guess rate limiting is based on the OS default because it's accessing the same subsystem responsible for unlocking the phone itself.
[ Parent | on HN ]