Solo: Help Solokey hacker

Created on 29 Aug 2020 · 6Comments · Source: solokeys/solo

Hi, I accidentally bought a hacker solokey instead of the standard solokey.
I have read that it can be converted to a standard solokey anyway.
I downloaded the 13 assets of version 4.0 from https://github.com/solokeys/solo/releases.
What is the flow chart to be able to make the solokey hacker a solokey standard?
I try to explain myself better. What is the order of the files to flash and what are they?

Source

parided

Most helpful comment

@cole-h My understanding is that Hacker version has different attestation key that is not part of FIDO2 certification (https://fidoalliance.org/certification/).. so if you need to authenticate to some services that requires key to be FIDO2 Level1 certified then you can't use hacker version.

There is no problem 2FA authenticating to common services - facebook, google, Linux PAM etc. all works with hacker version.

quoing on 24 Jan 2021

👍2

All 6 comments

You can't convert a hacker to a standard key, as the attestation private key is secret. It's possible to lock it down, is this what you want?

nickray on 5 Sep 2020

there is a text in solo repo: "Check out solokeys.com, for options on where to buy Solo. Solo Hacker can be converted to a secure version, but normal Solo cannot be converted to a Hacker version."

LEXOmx on 6 Sep 2020

👍1

I may have related question, I own hacker version of somu. Now I'm trying to access web that requires Level 1 Fido certification, but the web page claims that my version is not certified.. The same with locked version of somu hacker key.

Does it mean that hacker version is not certified? Or is issue on web page?

quoing on 23 Oct 2020

The firmware is what's certified.

But what your web page is doing is checking the attestation certificate against a whitelist (or using the Fido metadata service to pull all known certified attestation certificates). An attestation certificate is valid for a specific attestation key, which needs to be kept secret. For this reason, hacker keys have a different ("well known") attestation key, and won't pass such requirements even if you lock the hacker key.

nickray on 23 Oct 2020

[...] hacker keys have a different ("well known") attestation key, and won't pass such requirements even if you lock the hacker key.

Does this mean that some websites may reject a Hacker key?

Asking because, as we get closer to the Solo V2 launch, I'm wondering if I should pick up a Hacker to both hack on and use, or a normal version to use in addition to a Hacker to hack on.