4 ms·

My Yubikey requires physical touch to authorize an SSH connection so it doesn't matter if I forward my agent to malicious servers as their attempts to hijack my

My Yubikey requires physical touch to authorize an SSH connection so it doesn't matter if I forward my agent to malicious servers as their attempts to hijack my socket will result in timeouts from my not authorizing their use with my physical key

danieldk 5y ago
If you have a Mac with Touch ID, you can also use secretive, which requires fingerprint authentication: https://github.com/maxgoedjen/secretive https://github.com/maxgoedjen/secretive Extra nice with the new Apple Magic Keyboard with Touch ID.
- justincormack 5y ago
  Yes, not using software keys is much the safest approach. They can't be stolen from your laptop oe remote forwarding.
  - pmoriarty 5y ago
    Biometrics have their own set of problems.
- 0xCMP 5y ago
  Nice, I'd been looking for an alternative to sekey unfortunately.
- Too 5y ago
  Anything similar for Linux and Windows? Modern SoCs do have secure enclaves, but how can one use it? I don't want a Yubikey dongle which i will forget at home when going to the office and vice versa. I'd be happy to get just the secure key storage without the fingerprint feature.
  - ProZsolt 5y ago
    Yubikey has the Nano series[1][2] which you can leave in your laptop [1]: https://www.yubico.com/gb/product/yubikey-5c-nano/ https://www.yubico.com/gb/product/yubikey-5c-nano/ [2]: https://www.yubico.com/gb/product/yubikey-5-nano/ https://www.yubico.com/gb/product/yubikey-5-nano/
- 0x000000001 5y ago
  Would be nice but I'm an M1 Mac Mini user and don't have Touch ID. I wish they sold a Touch ID peripheral and not a full keyboard. I won't give up my hardware switches for Touch ID
blibble 5y ago
unless they do it at the same time as you logging in to something else?
- 0x000000001 5y ago
  They'll only get one hop and I'll get a push notification immediately upon login to my server anyway
  - xyzzy_plugh 5y ago
    I'm in the process of setting this up for a network -- what are you using for push notifications?

danieldk 5y ago

If you have a Mac with Touch ID, you can also use secretive, which requires fingerprint authentication: https://github.com/maxgoedjen/secretive https://github.com/maxgoedjen/secretive Extra nice with the new Apple Magic Keyboard with Touch ID.

justincormack 5y ago
Yes, not using software keys is much the safest approach. They can't be stolen from your laptop oe remote forwarding.
- pmoriarty 5y ago
  Biometrics have their own set of problems.
0xCMP 5y ago
Nice, I'd been looking for an alternative to sekey unfortunately.
Too 5y ago
Anything similar for Linux and Windows? Modern SoCs do have secure enclaves, but how can one use it? I don't want a Yubikey dongle which i will forget at home when going to the office and vice versa. I'd be happy to get just the secure key storage without the fingerprint feature.
- ProZsolt 5y ago
  Yubikey has the Nano series[1][2] which you can leave in your laptop [1]: https://www.yubico.com/gb/product/yubikey-5c-nano/ https://www.yubico.com/gb/product/yubikey-5c-nano/ [2]: https://www.yubico.com/gb/product/yubikey-5-nano/ https://www.yubico.com/gb/product/yubikey-5-nano/
0x000000001 5y ago
Would be nice but I'm an M1 Mac Mini user and don't have Touch ID. I wish they sold a Touch ID peripheral and not a full keyboard. I won't give up my hardware switches for Touch ID

blibble 5y ago

unless they do it at the same time as you logging in to something else?

0x000000001 5y ago
They'll only get one hop and I'll get a push notification immediately upon login to my server anyway
- xyzzy_plugh 5y ago
  I'm in the process of setting this up for a network -- what are you using for push notifications?