3 ms·
So, they make you write the password down. Then they take the Yubikey. Then they take your eyeballs and your fingers. I'm not so sure I want to encourage the
by bradknowles 7y ago
So, they make you write the password down.
Then they take the Yubikey.
Then they take your eyeballs and your fingers.
I'm not so sure I want to encourage them to do #3.
- roblabla 7y agoI mean, if someone is forcing me to login at gunpoint, I'll gladly oblige - no need for them to gouge my eye out. This is not the threat model being used here. This feature is meant to protect you when you forget your yubikey on your laptop while on lunch break, allowing any co-worker from logging in/using the GPG keys stored within.
- munchbunny 7y agoIf someone is willing to do that to you to get to the things behind the password, it wouldn't matter whether you enrolled a biometric factor. At that point it's not a tech problem anymore.