Hacker News Reader

Comment by thriftwy | Hacker News Reader

I wonder if nobody did ssh+nfc keys yet. At least I could trust it.

SSH+NFC sound like horrible protocol choice for such token.

Not that I would be against option to periodically rekey the whole system. Generate new pair of private keys and have the car and key swap them with my approval.

You don't need to ever rekey an SSH private-public key pair. Still, a single hands-free token can be taken by force or stolen.

So can car key... I don't really have a car and probably never will were I truly worried that it was essentially single factor authentication.

But the car key + separate wireless immobilizer token is 2FA and it makes me somewhat confident.

WRT keyless entry, I actually have figured it out. Central wireless lock is cool. It's keyless start that I'm opposed to.

And how often you keep those separate and operate the car? Can you even safely store one in safe place and still use the car? Or is there more factors. Which then increases the potential failure cases. And I prefer really not to involve anything like pin codes, fingerprints, facial recognition needed for me to drive my own car.

Fingerprints and facial recognition is circus, but physical token is a real thing, and I do keep it separate from my car keys

The security of key fobs is not a great concern when the windows can still be smashed.

Key fob allow you to start the car engine, it should be a concern

Reply on news.ycombinator.com