4 ms·

This is not my experience at all.. Most people I talk to about this loves their Yubikeys including myself. I guess they have gotten a lot of flack for not bein

This is not my experience at all.. Most people I talk to about this loves their Yubikeys including myself. I guess they have gotten a lot of flack for not being fully open source but in my experience most people are OK with this.

amingilani 9y ago
That's what I meant. From what I can recall on HN articles in the past, they hate them because it's closed source. Even this article says they're bad.
- j_s 9y ago
  Yubikey originally supported an open source applet that ran on a proprietary runtime. A positive for this partially open source approach was that a serious bug was found in the applet (PIN bypass) and they had to do a recall. They have since switched to 100% proprietary. https://developers.yubico.com/ykneo-openpgp/SecurityAdvisory%202015-04-14.html https://developers.yubico.com/ykneo-openpgp/SecurityAdvisory... I think they catch more flack because of the switch than they would have if they had been completely proprietary the entire time! (Even though the original open source applet couldn't be trusted completely since it ran on a proprietary runtime, the same way many do not trust open source Android software on phones due to proprietary cellular hardware.) https://www.yubico.com/2016/05/secure-hardware-vs-open-source/ https://www.yubico.com/2016/05/secure-hardware-vs-open-sourc...