3 ms·
Disappointed but not surprised when reading this. To be really honest, I can't remember the last time I read something that criticized so called "techbros" and
by easterncalculus 6y ago
Disappointed but not surprised when reading this. To be really honest, I can't remember the last time I read something that criticized so called "techbros" and actually said something reasonable.
As for the U2F devices, the idea of just leaving them in, the small yubikeys and all that, seem to just be a bad idea from the get-go.
- Freak_NL 6y agoYou can leave them in, but you still have to tap/touch them for every authentication action (user interaction); the small YubiKey Nano included.
- wyager 6y agoWhat is your objection to just leaving a yubikey plugged in? It eliminates most of the ways an attacker could impersonate me besides literally stealing my laptop, which is a high bar. Most people are valuable enough targets to phish or infect with malware or something, but not to plan a computer heist.
- kps 6y agoIf stealing the computer is enough, someone's seriously screwed up already — it's supposed to be 2FA, not 1FA.
- aidenn0 6y agoStealing the computer is usually enough, as a browser cookie serves as proof of authentication all on its own. Some destructive operations require extra auth, but in terms of data exfiltration, stealing a laptop gives you everything you need.
- izacus 6y agoWhat exactly does that have to do with YubiKeys though? Every time you use one you need to enter password. And you can also immediately revoke it as soon as you notice its stolen.
- aidenn0 6y agoI kind of omitted that part. Having a YubiKey in or not in the laptop won't really affect things (other than the fact that you will need to get into your account somehow without the yubikey if the yubikey is stolen).
- goodpoint 6y agoFound the techbro.