Secure auth with dumb chips, secret outside of NDEF (xSIID?)

[yeka]

@ellenhp

If you’re not worried about the password being cracked then I don’t see a big reason not to do it

How would it be cracked? You’d need my chip + my PC’s password + possibly a password from my head.

@ellenhp

, you could store 6 characters of it in an NDEF record and remember the remaining 6, but I wouldn’t recommend it

Ough no, that doesn’t sound good to me either

@ellenhp

reliably enforce throttling unlock attempts.

That would be the task the reader e.g. the PC I wanna unlock.

@ellenhp

it’ll take 5 years to crack your PIN. By then, with any luck,

By then, with luck, I have an Apex.

@ellenhp

This obviously breaks down if your threat model includes being your implant being scanned and your phone being broken into

I mean if they are already in my phone, I’m doomed anyways.

@Zwack

Yes, just splitting a password in two doesn’t help if it is unencrypted.

Yeah ofc not, I’d probably choose some random bytes in my NExT + some random bytes on my PC and hash that together. (Or encrypt one with the other.)

@Zwack

And you might just want to wait to use a Vivokey Apex.

Yeah true that, I know I’m late with all these thoughts… Apex will change everything.