4 ms·
There is probably a good reason for this that I don't know, but why haven't physical keys replaced passwords yet? Want to manage your IoT device? Just slot in a
by indigochill 6y ago
There is probably a good reason for this that I don't know, but why haven't physical keys replaced passwords yet? Want to manage your IoT device? Just slot in a USB key, do your thing, and unslot it.
You don't really have to sweat the security of the key laying around because its mere existence requires an attacker perform physical penetration which is a different attack profile from someone just cruising Shodan.
Granted, a USB key doesn't make sense for every device, but e.g. it seems like it would make a lot of sense for my router.
- 0xCMP 6y agoI wish thats how a lot of things work, but I imagine it would end up encouraging some to create "proprietary" ones (only ours that has special certificate) to work. Then charge like crazy the same way dealers do with car keys.
- masnaox 6y agoexcept dealer keys are software. so I guess car firmware is already the worst of both? which further reinforces the point of the top comment in this thread we are in.
- deleted 6y ago[deleted]