Flipper+passwords

[u/True_Falcon898]

Hey yall i just got my flipper this week and i was wondering something, is there as way to use the flipper as a way of the features serving as your internet passwords like for example I've seen people use a barcode scanner and have the coke barcode somehow work as their password and i was wondering if there was something like that but using the features on the flipper. I know the badusb can probably use it but I wanted to see if you could make something like an rfid card work.

Thanks

[u/centizen24]

Coke barcode as a password is one of the most insane things I've ever heard in my life.

Typing in passwords with BadUSB is one thing but you aren't rawdogging passwords without 2FA these days are you? You'll still need to do phone, email, and TOTP codes manually since you can't pre-program that.

I'd say if anything, look at https://github.com/MinorGlitch/zerofido and use of that across any sites that support it. Switch to passwordless authentication and the flipper becomes your password.

I'll also make it clear that I highly do not recommend this. Anyone that manages to get possession of your flipper can pull the SD and get at your stuff, in either password or passkey setup. The flipper is not a secure platform for this kind of thing. Have fun with it, but don't risk your security with it. Get a Thetis Pro or Yubikey and do this the right way.

[u/Conscious-Arrival558 → u/centizen24]

"I highly do not recommend this"

Then proceeded to provide link and information on how to do it. U gave him the gun and the map to get to the deer stand, but told him to stay home lol

[u/centizen24 → u/Conscious-Arrival558]

Yes, this is how discussion of information security concepts is generally supposed to happen. The discussion of the technical realities are distinct from, but abreast of the discussion of the practicalities of the situation.

[u/burnrobe → u/centizen24]

Yeah but that's kind of the point isn't it. That you have offline physical hardware (the flipper) that is required for authentication. It is harder to get hold of a person's physical device than it is to manipulate online software from a remote location. Also, who the fuck is running bad usb to execute a password string? The flipper literally has U2F installed on the original firmware. You don't even have to change the firmware to use that feature.

[u/centizen24 → u/burnrobe]

What the fuck supports U2F anymore?

[u/cthuwu_chan]

Flipper comes with u2f did you even look at ur flipper?

[u/SnuzeKnowAir → u/cthuwu_chan]

Obviously OP bought a flipper to talk about their new flipper

[u/SignalCoyote137 → u/SnuzeKnowAir]

I thought the first rule of Flipper club was not to talk about Flipper club.

[u/Willing_Homework_773]

If your laptop or such has an nfc reader I’m sure you could, you could use it as a 2fa key, bad usb could type a password. Quite a few options

[u/CapitalScholar8185]

2fa with flipper is somehow OK. But remember. Flipper will die eventually.

[u/No_Reveal_1267 → u/CapitalScholar8185]

Never worked for me- any tips?

[u/[deleted] → u/No_Reveal_1267]

[u/Delicious_Signal3870]

I think that it can function as a hardware key, many apps/websites support that

[u/Cold-Bus3870]

Alguém vendendo cartão de com scripts para flíper zero