←back to thread

79 points LorenDB | 7 comments | | HN request time: 0.89s | source | bottom
1. joelthelion ◴[] No.44386224[source]
I wish we had good support for fingerprint readers instead.
replies(3): >>44386484 #>>44388400 #>>44388454 #
2. cyp0633 ◴[] No.44386484[source]
I use fprintd and it works well with GNOME + builtin Elan sensor. It indeed needs more complex configuration than Touch ID or Windows Hello though.
replies(1): >>44388683 #
3. Pwntastic ◴[] No.44388400[source]
It was relatively easy to setup a yubikey bio fingerprint device in arch with pam-u2f. I just kinda followed the wiki here: https://wiki.archlinux.org/title/Universal_2nd_Factor

It wasn't strictly plug and play, but it only took like 20 minutes of fiddling.

replies(1): >>44396534 #
4. amaccuish ◴[] No.44388454[source]
That, and TPM integrated WebAuthN.
5. mouse_ ◴[] No.44388683[source]
In Fedora it's (supposed to be) pretty simple. Just go into settings -> users and add your fingerprint. In practice I usually have to use dnf to nuke pam and reinstall it manually for it to start working. But they have a good skeleton set up. Still no predesktop authentication, though.
6. simtel20 ◴[] No.44396534[source]
I thought yubikeys only provided a sensor for the fact that the sensor was touched, vs fingerprint resets that actually distinguish whose fingerprint is touching the sensor before being usable as an authenticator
replies(1): >>44397455 #
7. Pwntastic ◴[] No.44397455{3}[source]
most of them only have touch sensors but the yubikey bio series devices have actual fingerprint readers, and as part of the device setup you register one or more fingerprints which are then stored on the device itself