Yep. To give you some example I login to my self-hosted forge this way. I also use PAM on my desktop to login this way. I also sudo this way. Unfortunately I don’t use this on my phone anymore as I switched to GrapheneOS which requires GooglePlay Services for this kind of auth mechanism (with possible work around https://codeberg.org/s1m/hw-fido2-provider that I didn’t try yet).
Please note I’m no security expert but to clarify few things are important precisely when you are not a professional :
- does it support standards? Basically acronyms like TOTP, FIDO, U2F, are what you should be looking for
- is it supported without additional software by supporting standards? can you use e.g. PAM on Linux with it or does it need a companion “app” somehow?
If the answer to either is “maybe” then I recommend before buying you search online and insure it does work with your specific setup. If the answer though is yes to standards and no to additional software then you are, unless there is a weird bug basically, pretty sure to be able to use it however you want, wherever you want.
Sidenote that it’s the same heuristic for IoT. If you buy a “brandname smart thing” then you probably need their idiosyncratic stack whereas if you rely on standards, e.g. Zigbee or ZWave, then you are nearly guaranteed a smooth experience.
Hope that helps. I know that navigating acronyms can be tricky but IMHO here it’s worth investing a tiny bit of time to recognize them.
Finally as we are talking about open hardware and security I would also add 3rd party audits. I don’t have the competency to insure that the hardware and software implementation are cryptographically safe. I can test that it does in some case what it claim to do, e.g. lock after 3 failed attempt, but could some kind of weird collision hash or bad pseudorandomness be used to practically limit the pool of potential keys or passwords? I don’t have the knowledge for that. I also can’t trust that NitroKey did it right based on the claim of their website. So… audits help bridge that gap in trust. If I can’t trust the vendor and I don’t have the expertise despite being entirely open then I look for others who did verify on my behalf.






I don’t know the purpose of this camera but sadly I have seen numerous driver battling against falling asleep, including on highways, so going faster than 100km/h on a 1ton machine.
You all might be excellent conscientious drivers who are horrified that the car might check on your ability to drive but I can tell you with 100% certainty that not all drivers, including otherwise very kind and caring people, are not always able to drive, yet still do so.
To be clear I am not advocating for any data to leave the car at any point. I’m only point that some usages of cameras pointing to the driver might be both beneficial to everybody and not be a privacy problem. How? Well detect the presence of eyes and if there is not, demand a conscious action (e.g. pressing a button) and if this does not work, increase stimulus, etc. This does NOT require any data from being sent to anybody.
Unrelated but I’m also for speed limiters for cars. I also do not think it’s a privacy issue.
Still, to clarify, safety MUST be improved WITHOUT hindering on privacy of anybody involved.