2 ms·
> It nullifies the extra security of a hardware key, turning all of your phones and tablets into weaker second factors, whether you want it or not Don't you ha
by riffraff 6y ago
> It nullifies the extra security of a hardware key, turning all of your phones and tablets into weaker second factors, whether you want it or not
Don't you have a second authentication factor to login on your phone? Fingerprint, pin, faceId.
I don't see how this is worse than a yubikey.
- buzer 6y agoHardware key is offline device, phones are online devices. While phones might have arguably quite good security, their attack surface is many times bigger than offline device that you keep with you. There is almost no way for remote attacker to gain access to offline device (though local attacker will likely have easier time getting that than phone). With phone it comes more down to cost/luck (pay/develop 0days until you have full chain).