home.social

#yubikey — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #yubikey, aggregated by home.social.

  1. This #Yubico #YubiKey Standard from approximately 2012 was on my personal key ring ever since on a daily basis. It has been my first FIDO2 token.

    It now ceased to work after approx. 14 years as it's no longer recognized by a computer when plugged in.

    Fortunately, it's been mostly replaced by a newer key months ago. So no data loss. Furthermore, I always had a second token that was registered with the same services anyway.

    That's my personal data point for durability of #FIDO2 #security hardware tokens. Not bad, I'd say. 👍️

    I still prefer FIDO2 HW tokens over #passkeys because HW tokens are not prone to #phishing: karl-voit.at/FIDO2-vs-Passkeys/ (German)

    #2FA #MFA #securitytokens #publicvoit #20241005_FIDO2VsPasskeys

  2. what's the deal with the Yubikey pop-up when you use NFC? It's highly irritating and on iPhone it seems to interfere with other logins - instead of approving a login, I get the pop-up on the second tap.

    Is there any way to deactivate the pop-up, short of replacing the Yubikey with a competitor?

    #Yubikey #Yubikey5nfc #Yubico #iPhone #NFC #enshittification

  3. Theo actually did it...

    From
    https://www.openbsd.org/78.html

    Do not attach YubiKeys as keyboards anymore in ukbd(4). This disables the OTP functionality, but makes it easier to use the FIDO function without the need to configure the YubiKeys correctly first.
    #BSD #FIDO #keyboard #OpenBSD #OTP #Yubico #YubiKey

  4. Hat jemensch schon einmal das Login der Schweizer Behörden (AGOV-Login, siehe agov.admin.ch/de) mit einem Nitrokey 3 getestet und kann etwas zur Kompatibilität sagen?

    Geht das oder braucht es "zwingend" einen Schlüssel von Yubico oder Token2 (beide mit L2-Zertifizierung)?

    Solo2-Schlüssel gehen jedenfalls nicht und die sind wohl eh EOL. Ich möchte gerne einen Schlüssel mit einer Open-Source-Firmware benutzen.

    @nitrokey #nitrokey #agov #yubikey #schweiz #OpenSource #securitykey

  5. New Privacy Guides article 🔑✨
    by me:

    If you are using a YubiKey,

    you might get in some situations where you need to reset your key to factory default, and/or set up a backup of it on a spare key.

    This tutorial will guide you
    through each step to reset and back up your YubiKey successfully, with clear instructions and plenty of visual support.

    I hope you find it helpful!

    privacyguides.org/articles/202

    #PrivacyGuides #Privacy #Yubico #YubiKey #Security #OTP #OpenPGP #Encryption #MFA

  6. Always remember, when it comes to hardware security keys: Two is one, one is none.

    Our latest article covers the setup process for two YubiKeys (from Yubico's YubiKey 4 or 5 series) to keep your online accounts safe and secure 🔒 + it goes through resetting your existing keys to a blank slate, and the reasons you might want to do so!

    privacyguides.org/articles/202

    #YubiKey #HardwareSecurity #Privacy #Yubico #Security #PrivacyGuides #Article

  7. apropos of absolutely nothing here's the #NSA's official best practices on mobile device security. some top tips:

    1. restart your device regularly (it's very hard for spyware to survive a restart, especially on an iPhone)
    2. avoid public wifi
    3. do not use public charging stations
    4. disable bluetooth
    5. don't install apps

    to which i would add:

    1. if you have an iPhone consider using apple's "Lockdown Mode" which prevents most pegasus style 0-click attacks
    2. consider using a hardware USB key for securing your most important accounts. #yubico's #yubikey is a good option.

    s3.documentcloud.org/documents

    #privacy #journalism #journalists #infosec #cybersecurity #uspol

  8. @iamkale @tychotithonus I was so excited when reading this first today, but it doesn't seem like it's generally available: "Keys are available exclusively via YubiKey as a Service". What does that mean?

    I use Yubikeys as an individual opensource contributor for SSH authentication and commit signing, I've been looking forward to this release since I posted this: infosec.exchange/@hertg/112577

    But it appears that this still isn't a release for me. Or am I missing something?

    #yubico #yubikey #pgp #opensource