Thread 105770646

Only a luser doesn't have at least 2 (work yubikey not not counted)

>>105770646 (OP)
I have a real job, sorry. Now go plug in my mouse tech janitor.

>>105770659
>my job doesn't require clearance
homo
Please clean the entrance to the SCIF

>>105770646 (OP)
>not biometric
ngmi

>>105770700
Bro thinks having a keycard is special opsec

What is the use case?

>>105770756
Depends on the key. WebAuthN (passkey/passwordless auth), 2FA (U2F, OTP), PIV... the most advanced can hold OpenPGP certificates, so you can sign and encrypt shit too.

That said don't get Yubikeys for personal use, Token2 do the same for a fraction of the price.

>>105770646 (OP)
usecase?
howto?

>>105771281

See >>105771140 retard

>keeping them both in the same spot
rookie mistake

Nothing supports them because they want to get your phone number and ID

>>105770756
Having a physical authentication key. Same philosophy as with chip cards but as an USB device.
Some websites support it and you can authenticate locally to some services and shit.

>>105770646 (OP)
Reminder that police can confiscate and use your passkeys and biometrics but can't compel you to tell them your passwords.

>>105772845
true

>>105772845
>not knowing the keys have a pin code
>not knowing inputting the bad pin x times locks/resets the key

>>105771347
This
I have 5 keys, unless I'm at home they're all in different places.
Two stay at home all the time (type A and type C)
Two stay in my laptop bag all the time (type A and type C)
One is on a lanyard that stays on my person whenever I leave the house (this also has a bitlocker encrypted usb stick with my bitlocker recovery keys on it, I'm working on getting a matching pair of high endurance ones for better safety though)

>>105773958
>bitlocker
lmao

>>105772845
>can't compel you to tell them your passwords.
Here in France, peeple have spent five years in prison for refusing to give their passwords to the police after a judge asked them to. Americans don't realize how good they have it.

>>105774949
Anything else to add other than showing me you're a retard?

>>105772841
It's just security LARP. It does not protect you from anything. You are not important. You are not immune to state level adversaries.

I just have 1 and printed out/wrote backup keys in case I lose it

>>105775703
>You are not immune to state level adversaries.
Therefore I shouldn't lock my car?

>>105771140
But retarudo-kun, Token2 doesn't have PIV. Not that one would care for anything that doesn't require entreprise level PKI, but still

>>105770646 (OP)
>no way to use it with sudo

>>105780119
>install fido2 pam module (pam-u2f)
>configure it
>/etc/pam.d/sudo:auth sufficient pam_u2f.so cue [cue_prompt=you're a fag]
This tech isn't for you, retard

>>105775010
It's almost like Eurofags need to rise up against their oppressors. But realistically neither will Americans when the same happens here.

>>105770646 (OP)
I hate that shit with passion
never fucking works as it should
github is full of threads like this
https://github.com/bitwarden/android/issues/5014#issuecomment-2800244778
and I use m1 macbook (only 2 ports), so I hate unplugging shit, just to put it yubikey
on a desktop - using it may be ok
but on phones it constantly finds a way to not works as expected, and on shitty laptops - putting them in is too much of a hassle

>>105781211
kinda bad example link
point still stands, it fails to work too often in many things

>>105781236
>I'm mentally handicapped
>I'm retarded
>I'm in the top 95% smarterer
>my employer gets tax benefits from employing me in particular

>>105772841
>>105771140
I can authenticate with one click using virtual webauthn passkeys in 1password
so I don't need a physical key
besides, what happens when you lose or forget to take a key? it sounds quite frustrating to carry it with you at all times
I think it's good for some key accounts, but not for everything

>>105774949
Noted in the CIA files, thanks.

>>105770646 (OP)
>he doesn't work in the trades
You're going to be replaced by a computer before 2030.

>>105783262
wife

i just use encryption.

>>105770646 (OP)
Whats the point of having multiple on a Keychain? Theres no security risk in using 1 for every service

all these little security gadgets could be cloned by a burglar more easily than a phone and if you hold a lot of crypto somebody already knows.

>>105783367
You can't hold more than n credentials in a single one (FIDO2). Also you should have backup, you don't want to lose access (or worse, ability to decrypt) because you lose one of them

>>105770646 (OP)
I wanted to use these until I realised that these are bad for people who leave home.

>Get sent abroad for a 3 day delegation
>No bank for you
>Need to check email outside of home
>No

>>105782139
>what happens when you lose or forget to take a key?
You use your second one.
>it sounds quite frustrating to carry it with you at all times
It's a thing that's plugged into my PC, I don't carry it.

just use passkeys bro

>>105784166
>I need a security key to keep a session open
>I can't carry a 5g object along with my physical keys around