4 ms·
A yubikey vulnerable to this attack perfectly protects against phishing, which is the attack the 99.9% of us have a practical reason to worry about. Not all vu
by technion 2y ago
A yubikey vulnerable to this attack perfectly protects against phishing, which is the attack the 99.9% of us have a practical reason to worry about.
Not all vulnerabilities are equal.
- lxgr 2y agoBut so does a software password manager supporting passkeys – at a much lower price.
- deleted 2y ago[deleted]
- jyounker 2y agoBut lesser convenience and with more hassle.
- meowster 2y agoYou're right: a physical security key is a lesser convenience with more hassle than a personal password manager in my case.
- palata 2y agoBut a software password manager on a compromised computer can be compromised, right? It feels like the secrets can't be extracted by a compromised computer: the attacker needs physical access to the Yubikey. This sounds better than a software password manager, right? Or am I missing something?
- lxgr 2y agoDefinitely, but GP mentioned > [...] phishing, which is the attack the 99.9% of us have a practical reason to worry about [...] Both physical and software authenticators protect just fine against that.