The Signet Hardware Password Manager serves as a testament to the power and resilience of open-source hardware and software. This session examines the critical vulnerabilities of software-based password managers, demonstrating how a momentary non-root compromise can make them as vulnerable as a plain text file. The presenter will explain how utilizing open-source hardware limits this potential damage and share the project's unusual history—from a successful crowdfunding campaign and the mysterious disappearance of its creator to its revival by a security researcher. The talk will bridge the gap between professional security expectations and common misconceptions regarding AES256 encryption, while also discussing the roles and limitations of FIDO2, passkeys, and 2FA in a modern security posture.
Project URL: https://hax0rbana.org/signet
Target Audience: