3 ms·

If you choose to opt-in to Advanced Protection, you can keep a backup hardware token somewhere outside of your house.

josephcsible 5y ago
My concern with that is that if something happened to the off-site token (e.g., ESD damage, or even just random failure over time), I may not realize until I needed it.
- greggyb 5y ago
  If you would like to take advantage of such an option, you are also opting in to taking on an operational burden. That burden is exactly maintaining a set of backup keys and testing them on a regular basis.
  - cinntaile 5y ago
    I agree with this, it was my original expectation.
  - Macha 5y ago
    And that's why "everyone should just use yubikeys" is never going to happen.
    - staticassertion 5y ago
      Everyone already pays the same operational burden with their house keys, which are far more difficult to manage for the average person (as they leave the house constantly). It's worked fine for hundreds of years.
      - iggldiggl 5y ago
        House keys don't just randomly break the way electronics sometimes do, though.
        staticassertion 5y ago
        I would bet that door locks and keys break pretty often. I know I've had many door locks that you had to wiggle just right.
      - Macha 5y ago
        If you lose your house keys, you get a lock smith to break into your house for you - your house doesn't become unusable forever more. If you ever need to have this done, you'll realise how much house keys and door locks for many cases really only stop the opportunistic "pull the handle and see if it opens" attack. If your door has above average security they'll need to drill the lock, but the time I had to call one they could just push a tool through the letter box and break/move the bolt by applying leverage from the "indoor" side.
        staticassertion 5y ago
        > If you lose your house keys, you get a lock smith to break into your house for you - your house doesn't become unusable forever more. Same with 2FA. Just like a Locksmith it's a "human in the loop" situation where you'll need to give identification etc. The rest of your post isn't relevant it's just about picking door locks.

My concern with that is that if something happened to the off-site token (e.g., ESD damage, or even just random failure over time), I may not realize until I needed it.

greggyb 5y ago
If you would like to take advantage of such an option, you are also opting in to taking on an operational burden. That burden is exactly maintaining a set of backup keys and testing them on a regular basis.
- cinntaile 5y ago
  I agree with this, it was my original expectation.
- Macha 5y ago
  And that's why "everyone should just use yubikeys" is never going to happen.
  - staticassertion 5y ago
    Everyone already pays the same operational burden with their house keys, which are far more difficult to manage for the average person (as they leave the house constantly). It's worked fine for hundreds of years.
    - iggldiggl 5y ago
      House keys don't just randomly break the way electronics sometimes do, though.
      - staticassertion 5y ago
        I would bet that door locks and keys break pretty often. I know I've had many door locks that you had to wiggle just right.
    - Macha 5y ago
      If you lose your house keys, you get a lock smith to break into your house for you - your house doesn't become unusable forever more. If you ever need to have this done, you'll realise how much house keys and door locks for many cases really only stop the opportunistic "pull the handle and see if it opens" attack. If your door has above average security they'll need to drill the lock, but the time I had to call one they could just push a tool through the letter box and break/move the bolt by applying leverage from the "indoor" side.
      - staticassertion 5y ago
        > If you lose your house keys, you get a lock smith to break into your house for you - your house doesn't become unusable forever more. Same with 2FA. Just like a Locksmith it's a "human in the loop" situation where you'll need to give identification etc. The rest of your post isn't relevant it's just about picking door locks.