HN Showcase
Back to browse
YubiClicker, a clicker game that requires a physical security key

YubiClicker, a clicker game that requires a physical security key

by k3wl·Apr 27, 2026·5 points·1 comment
Visit ProjectView on HN

AI Analysis

●●SolidCozyWizardry

FIDO2 attestation chain-verification against FIDO MDS3 makes cheating actually hard.

Strengths
  • •Hardware attestation verification against vendor root certificates prevents software spoofing
  • •Multiple leaderboards (total taps, clock-minute, streak) with key-type breakdowns
  • •Accepts YubiKey, Titan, Feitian, Solo, Nitrokey—broad hardware compatibility
Weaknesses
  • •Author admits automation via mechanical tap is possible and counts as winning
  • •Novelty gameplay with no long-term engagement beyond leaderboard climbing
Category
Gaming
Target Audience

Security key owners, FIDO2 enthusiasts

Similar To

Cloudflare Cryptographic Attestation of Personhood

Post Description

I thought cookie clicker but with yubikey taps might be funny, and this is a proof of concept. Cloudflare did something similar in 2021, pitching yubikey-proven taps as a captcha replacement:

https://news.ycombinator.com/item?id=27141593

Cloudflare's idea of proving personhood with yubikey taps wasn't well received at the time. But here for a silly game, I think the idea holds up better. We can prove that you have a key, and serially tapped it a lot. If you automate activating the touch sensor on a physical key, you might be able to do a bit better. That's cool and you deserve to win.

Similar Projects