please boost: i really want to like onlykey but it's all but abandoned

how would one go about making a successor?

im most stumped on manufacturing cheaply. their duo (my favourite form factor on any security key) is only $50!

#boost #onlyKey #hardwareKey #fido2 #security

i'm rewriting my onlykey qube. before, i don't know why, but i had this unconventional way of passing the identity to the onlykey qube from the client qube. looking at it again, i realized i could simplify it band even support the standard split ssh implementation, so i'm doing that

#qubes #qubesOS #onlykey

i *still* don't understand how this onlykey works. i've kinda figured out how to generate subkeys (you have to have $GNUPGHOME point to a valid keyring that has a public key on which you want to create a subkey for, but use `--homedir` to point to a new directory for onlykey to put the new keyring with the subkey), but now it won't generate keys except for the uid i used to use?

#onlykey #hardwareKey #securityKey #pgp #gpg

in a totally unsurprising turn of events, working on software for my onlykey is forcing me to learn lots of details about pgp/gpg, ssh, their agents, and all the fido2/ctap stuff

it's cool though

#onlyKey #GPG #SSH #security #cryptography

anyway if you wanna see what i'm doing, i am now push-mirroring from my personal forge to github (and codeberg!):

- https://github.com/xyhhx/onlykey-rs
- https://github.com/xyhhx/qubes-split-onlykey

please don't judge me too harshly, i'm still babby. that said, i'm happy to hear feedback if you have any suggestions

#QubesOS #qubes #onlykey #security #rust

@fanch @bearstech je l'utilise depuis un peu plus de 2 ans, j'avais un peu fait le tour des possibilités. J'ai complété avec une #onlykey pour déverrouiller le gestionnaire quand je suis sur ordinateur, ce qui me permet d'utiliser un mot de passe fort. Sur le tel, j'utilise la biométrie.
Je me sers aussi de l'#otp pour rassembler tout dans la même application afin de m'éviter des manipulations parfois douloureuses(fibro), ça simplifie aussi la sauvegarde. J'ai utilisé #aegis avant ça, et encore avant #andOTP. Bref, jusqu'à maintenant, je suis comblé.

in case you may have not known, if you have a #yubikey or an #onlykey or something similar you can generate SSH keys that require them, for example:

`ssh-keygen -t ed25519-sk`

more info:

https://security.stackexchange.com/a/240992

#SSH #security #ed25519 #sshkeys #linux #openssh

🔑 Protect your online accounts with OnlyKey - a hardware password manager, security key, and encryption token in one! 🔒

#OnlyKey #PasswordManager #2FA #Cybersecurity

https://onlykey.io/

I ordered an #OnlyKey and it arrived recently, I started setting up accounts with it today, and I'm loving the #SSH support out of the box on #linux / #Ubuntu

of course, while I can't sleep, lol, I was checking out the list of sites that support #yubikey or their alternatives, and I'm pleasantly surprised at how many sites work with security keys these days

I'm also really happy with the ability to store passwords right on the OnlyKey, which will be convenient between devices

@thenewoil

Very interesting article. So #OnlyKey is still super secure.

Hey, that #Yubico x #Cloudflare offer let me have two #Yubikey 5 NFC for just €35 incl. shipping! Pretty neat, even if I don't like Cloudflare that much :P

Finally, I can give friends keys and not pay thru the nose for it!

(I have an #Onlykey and a Yubi 4 Nano, and Onlykey kinda sucks sometimes).

@jonasvautherin I use an #OnlyKey. Nice h/w buttons to input PINs or output static/TOTP/whatever you want. Functions as a keeb so you don't need software. Still need to go to a website or use its app to let it set initial time for TOTP tho... but that way it works on anything that has a modern browser and that's all. Supports FIDO2.

the h/w is not completely open source and there's still no support for PGP/SSH on Windows (it's NOT an 'OpenPGP Smartcard'!). I pondered writing something for it!

Now, folks. Which #2fa #Fido2 #u2f #security #key do you prefer, and why? #NitroKey, #OnlyKey, #SoloKey, #YubiKey or something else entirely?

@matt In other words, #YubiKey. Because nobody knows what's in this proprietary closed source blob of an USB key.

#OnlyKey sucks at windows support tho.

@alpinefolk @lightweight how is the portability across platforms on those?

Currently using an #OnlyKey (12 slots) for this on my end, and index cards for the infrequent ones.

My favourite part is never fiddling with browser plugins...it even works with mobile, provided I remember to bring my OTG adapter.

Build myself a necklace for my #onlykey. This way I can't loose it, at least I hope^^

One last post about my #onlykey for today, I promiss^^
As one ladt thing I wanted to find a way to authenticate sudo and other stuff on my servers with my hardwarekey on my PC. Learned about pam-ssh-agent-auth and set that up. Works now.
Just have to deploy that to the rest of my servers.

While using my #OnlyKey for authentication on linux was super easy, getting ssh and gpg working on/with it is a huge pain