3 ms·
> The reason you have to touch the key is so that if an attacker gains access to your computer with an attached Yubikey, they will not be able to use it (it req
by brazzy 7y ago
> The reason you have to touch the key is so that if an attacker gains access to your computer with an attached Yubikey, they will not be able to use it (it requires physical presence).
Additionally, it prevents brute force attacks on the hardware.
- penagwin 7y agoOnly If you keep your key and computer hardware separate and kept separate. Some hardware keys are being built into devices, or are left in them semi-perminately (to be fair, physical attacks arent a real concern for most people)
- brazzy 7y agoNo - what I meant is exactly that a hardware key permanently left in a computer is still safe from brute force attacks by software running on that computer (which could be Javascript on a website the user visited) because it requires physical interaction for each single operation it performs.
- penagwin 7y agoAh my bad, I misunderstood your comment.
- baud147258 7y agoThe physical interaction was already necessary for the non-biometric keys, no?
- brazzy 7y agoYes, it's not an advantage specifically of the biometric one.