HNHacker News
TopNewBestAskShowJobs

jehteh

22 karma · joined June 11, 2019

Calgary based Canadian consultant specialising in embedded systems design. This includes project architecture, PCB design, prototyping, and real-time firmware in C and C++, as well as various Linux flavours. Professionally, I have experience in power electronics, battery management systems and some large scale industrial mining related systems. Personally, time spent building and tuning a performance combustion engine and various associated design and electronics, as well as tinkering with 3D printing and computer systems.

I can be reached at jonathan.thomson@ivei.ca (professionally) or jt@jonathanthomson.ca (personally).

submissionscomments
jehteh··on Ask HN: Is GNU pass and Yubikey (via NFC) supported on iPhone?
My concern here is there appears to be a few open issues around Yubikey support - it sounds like it 'might' work as I described but it might not, and I don't have an iPhone to test with. I don't want to have to use the physical connector, for example. I will reach out to the developer and see if he can clarify directly.
jehteh··on Ask HN: Is GNU pass and Yubikey (via NFC) supported on iPhone?
I have always assumed 'GNU' pass is more of a colloquial term - possibly because 'pass' rarely results in meaningful results when searching the web, as does 'passwordstore' (although at least it does point to the actual repository. I seem to recall a few years ago googling 'password store' would not even return that on the first page).

As far as I am aware there is zero relation to GNU projects, aside from pass requiring GPG. I believe the author of pass is the same fellow who wrote wireguard.

jehteh··on Clever uses of pass, the Unix password manager
I hope people back up their GPG keys (and test their backups! My subkeys on the yubikey expire annually, forcing me to validate my master key backup at least once a year).

Disabling touch is another option if you need to do a large batch of operations and are comfortable that your machine is secure.

jehteh··on Clever uses of pass, the Unix password manager
If you are using GPG keys and have the master key backed up somewhere you can fairly easily use that on an offline machine to add the new key to the full batch of password files without needing to perform a million button presses.
jehteh··on Support for U2F security keys
Switched from lastpass to gnu pass and storing my private subkeys on a couple of yubikeys has actually worked really well for me (took a few days to get my head around gpg and smartcard setup, but that was worth doing even if I didn't setup pass). That said, I am running android, windows/WSL and ubuntu; other platforms may not be so painless.