3 ms·
I don't know about the OP, but for me the reason is that it's made by a company with a much bigger profile than yubico This means that it's under much higher s
by pilif 8y ago
I don't know about the OP, but for me the reason is that it's made by a company with a much bigger profile than yubico
This means that it's under much higher scrutiny by the public. Due to that big profile I also expect security issues to be fixed quickly as Apple has much more reputation (and money) to lose than Yubico.
Finding exploits in the iPhone's secure element gains you much more fame than finding exploits in the Yubikey.
And finally, Apple has come out very publicly against aiding law enforcement and has a much bigger war chest to fight requests by law enforcement.
Yubico has neither.
- sweden 8y agoBut an Yubikey is a passive and isolated device: it doesn't turn itself on, it doesn't run any apps, it doesn't connect to the internet. And if it gets compromised (stolen or exploited), it's cheap enough to throw it away and to replace it with a new and improved version without any hassle.
- zaroth 8y agoStealing a Yubikey gives you immediate access to the 2nd factor, and I might not notice right away. Stealing my iPhone gives you almost zero chance of accessing the second factor, I would notice a lot quicker, and I could revoke access (remote wipe) with a single click versus having to re-enroll a new 2FA at every single site individually.
- YR372zm87 8y agoYou can password protect the Yubikey. That's how mine is setup. Adds an extra step, but I don't worry about losing it.