3 ms·
I try to use Touch ID for everything it can be used for. Touch ID for sudo http://osxdaily.com/2017/11/22/use-touch-id-sudo-mac/ http://osxdaily.com/2017/11/22
by drexlspivey 8y ago
I try to use Touch ID for everything it can be used for.
Touch ID for sudo http://osxdaily.com/2017/11/22/use-touch-id-sudo-mac/ http://osxdaily.com/2017/11/22/use-touch-id-sudo-mac/
Touch ID for SSH https://github.com/sekey/sekey https://github.com/sekey/sekey (uses secure enclave)
I use this for 2FA https://krypt.co/ https://krypt.co/ (uses secure enclave on your phone)
Touch ID for password management https://1password.com/ https://1password.com/
I upload dotfiles and other credentials in a keybase encrypted repo
- majewsky 8y agoSo I assume your threat model is exclusively keyloggers? It's certainly not physical access. Your fingerprints are all over the device's surface, so a determined attacker can easily duplicate them. (And to a non-determined attacker, Touch ID does not make much of a difference to passwords.)
- tinco 8y agoHaving your ssh key password protected would be a lot more annoying than having them touch id protected. The threat model would be someone using your Mac if you left it unlocked for a minute or something.
- kkarakk 8y agodo laptops without touchid have secure enclave(or a way to access it)?