Hacker News Reader

> Someone could physically force me to use the fingerprint reader, or might just cut off my finger to use it, which is even worse.

If that’s your threat model, move to a safer country. No authentication system in this class will protect against coercion and for 99.999999% of people the risk is much lower than the risk of not locking their device.

I don't like using fingerprints because my fingerprint is literally left on the reader. Anybody with a scotch tape can get a copy of my fingerprint left on the reader or the screen. That's like writing down your password on a post-it on your monitor. Anybody dedicated enough can then make a fake finger that can log in.

Not that I'm worried about someone pulling this spy operation on me but if my laptop is lost or stolen, I won't have the peace of mind.

Ubikey has a free U2F PAM module! And I've seen a PAM module got TOTP, I think someone demod it for ssh logins!