← Home ← Back to /g/

Thread 105770646

42 posts 14 images /g/
Anonymous No.105770646 [Report] >>105770659 >>105770726 >>105771281 >>105772845 >>105780119 >>105781211 >>105782266 >>105783367 >>105784166
security keys
Only a luser doesn't have at least 2 (work yubikey not not counted)
Anonymous No.105770659 [Report] >>105770700
>>105770646 (OP)
I have a real job, sorry. Now go plug in my mouse tech janitor.
Anonymous No.105770700 [Report] >>105770746
>>105770659
>my job doesn't require clearance
homo
Please clean the entrance to the SCIF
Anonymous No.105770726 [Report]
>>105770646 (OP)
>not biometric
ngmi
Anonymous No.105770746 [Report]
>>105770700
Bro thinks having a keycard is special opsec
Anonymous No.105770756 [Report] >>105771140 >>105772841
What is the use case?
Anonymous No.105771140 [Report] >>105771313 >>105779497 >>105782139
>>105770756
Depends on the key. WebAuthN (passkey/passwordless auth), 2FA (U2F, OTP), PIV... the most advanced can hold OpenPGP certificates, so you can sign and encrypt shit too.

That said don't get Yubikeys for personal use, Token2 do the same for a fraction of the price.
Anonymous No.105771281 [Report] >>105771313
>>105770646 (OP)
usecase?
howto?
Anonymous No.105771313 [Report]
>>105771281

See >>105771140 retard
Anonymous No.105771347 [Report] >>105773958
>keeping them both in the same spot
rookie mistake
Anonymous No.105772822 [Report]
Nothing supports them because they want to get your phone number and ID
Anonymous No.105772841 [Report] >>105775703 >>105782139
>>105770756
Having a physical authentication key. Same philosophy as with chip cards but as an USB device.
Some websites support it and you can authenticate locally to some services and shit.
Anonymous No.105772845 [Report] >>105772857 >>105773820 >>105775010
>>105770646 (OP)
Reminder that police can confiscate and use your passkeys and biometrics but can't compel you to tell them your passwords.
Anonymous No.105772857 [Report]
>>105772845
true
Anonymous No.105773820 [Report]
>>105772845
>not knowing the keys have a pin code
>not knowing inputting the bad pin x times locks/resets the key
Anonymous No.105773958 [Report] >>105774949
>>105771347
This
I have 5 keys, unless I'm at home they're all in different places.
Two stay at home all the time (type A and type C)
Two stay in my laptop bag all the time (type A and type C)
One is on a lanyard that stays on my person whenever I leave the house (this also has a bitlocker encrypted usb stick with my bitlocker recovery keys on it, I'm working on getting a matching pair of high endurance ones for better safety though)
Anonymous No.105774949 [Report] >>105775211 >>105782150
>>105773958
>bitlocker
lmao
Anonymous No.105775010 [Report] >>105780883
>>105772845
>can't compel you to tell them your passwords.
Here in France, peeple have spent five years in prison for refusing to give their passwords to the police after a judge asked them to. Americans don't realize how good they have it.
Anonymous No.105775211 [Report]
>>105774949
Anything else to add other than showing me you're a retard?
Anonymous No.105775703 [Report] >>105777847
>>105772841
It's just security LARP. It does not protect you from anything. You are not important. You are not immune to state level adversaries.
Anonymous No.105775820 [Report]
I just have 1 and printed out/wrote backup keys in case I lose it
Anonymous No.105777847 [Report]
>>105775703
>You are not immune to state level adversaries.
Therefore I shouldn't lock my car?
Anonymous No.105779497 [Report]
>>105771140
But retarudo-kun, Token2 doesn't have PIV. Not that one would care for anything that doesn't require entreprise level PKI, but still
Anonymous No.105780119 [Report] >>105780619
>>105770646 (OP)
>no way to use it with sudo
Anonymous No.105780619 [Report]
>>105780119
>install fido2 pam module (pam-u2f)
>configure it
>/etc/pam.d/sudo:auth sufficient pam_u2f.so cue [cue_prompt=you're a fag]
This tech isn't for you, retard
Anonymous No.105780883 [Report]
>>105775010
It's almost like Eurofags need to rise up against their oppressors. But realistically neither will Americans when the same happens here.
Anonymous No.105781211 [Report] >>105781236
>>105770646 (OP)
I hate that shit with passion
never fucking works as it should
github is full of threads like this
https://github.com/bitwarden/android/issues/5014#issuecomment-2800244778
and I use m1 macbook (only 2 ports), so I hate unplugging shit, just to put it yubikey
on a desktop - using it may be ok
but on phones it constantly finds a way to not works as expected, and on shitty laptops - putting them in is too much of a hassle
Anonymous No.105781236 [Report] >>105782081
>>105781211
kinda bad example link
point still stands, it fails to work too often in many things
Anonymous No.105782081 [Report]
>>105781236
>I'm mentally handicapped
>I'm retarded
>I'm in the top 95% smarterer
>my employer gets tax benefits from employing me in particular
Anonymous No.105782139 [Report] >>105784251
>>105772841
>>105771140
I can authenticate with one click using virtual webauthn passkeys in 1password
so I don't need a physical key
besides, what happens when you lose or forget to take a key? it sounds quite frustrating to carry it with you at all times
I think it's good for some key accounts, but not for everything
Anonymous No.105782150 [Report]
>>105774949
Noted in the CIA files, thanks.
Anonymous No.105782266 [Report]
>>105770646 (OP)
>he doesn't work in the trades
You're going to be replaced by a computer before 2030.
Anonymous No.105783262 [Report] >>105783276
Anonymous No.105783276 [Report]
>>105783262
wife
Anonymous No.105783325 [Report]
i just use encryption.
Anonymous No.105783367 [Report] >>105784050
>>105770646 (OP)
Whats the point of having multiple on a Keychain? Theres no security risk in using 1 for every service
Anonymous No.105783376 [Report]
all these little security gadgets could be cloned by a burglar more easily than a phone and if you hold a lot of crypto somebody already knows.
Anonymous No.105784050 [Report]
>>105783367
You can't hold more than n credentials in a single one (FIDO2). Also you should have backup, you don't want to lose access (or worse, ability to decrypt) because you lose one of them
Anonymous No.105784166 [Report] >>105785544
>>105770646 (OP)
I wanted to use these until I realised that these are bad for people who leave home.

>Get sent abroad for a 3 day delegation
>No bank for you
>Need to check email outside of home
>No
Anonymous No.105784251 [Report]
>>105782139
>what happens when you lose or forget to take a key?
You use your second one.
>it sounds quite frustrating to carry it with you at all times
It's a thing that's plugged into my PC, I don't carry it.
Anonymous No.105784459 [Report]
just use passkeys bro
Anonymous No.105785544 [Report]
>>105784166
>I need a security key to keep a session open
>I can't carry a 5g object along with my physical keys around