Shakedown Social

1 post1 participant0 posts today

JonatanWith USB/IP, I can now use my YubiKey remotely via SSH in the same way as I was sitting in front of my machine. Both in early boot stage (initrd); unlocking LUKS encrypted filesystem, and in booted system stage; signing git commits and authenticate to GitHub. Great! But what about using FIDO2/WebAuthn via RDP to log in to web services? USB redirection is not supported for xrdp. Is there any workarounds coming up to for example redirect WebAuthn from one machine to another?<a href="https://defcon.social/tags/yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#yubikey</a> <a href="https://defcon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://defcon.social/tags/usbip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#usbip</a> <a href="https://defcon.social/tags/rdp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rdp</a> <a href="https://defcon.social/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a> <a href="https://defcon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸<a href="https://mastodon.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkeys</a> are for people who only use one device to access the Internet, or multiple devices that are all made by AAPL/GOOG.If you use Firefox on Ubuntu, Edge on Windows, Safari on Mac OS, and Chrome on ChromeOS you will have a bad time.<a href="https://mastodon.social/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webauthn</a> <a href="https://mastodon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://mastodon.social/tags/passkey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passkey</a> <a href="https://mastodon.social/tags/auth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#auth</a> <a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸Explain <a href="https://mastodon.social/tags/passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passkeys</a> to me like I'm your grandparents.<a href="https://mastodon.social/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a> <a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/fido" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido</a> <a href="https://mastodon.social/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webauthn</a> <a href="https://mastodon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://mastodon.social/tags/otp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#otp</a> <a href="https://mastodon.social/tags/yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#yubikey</a> <a href="https://mastodon.social/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#password</a> <a href="https://mastodon.social/tags/auth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#auth</a>

Matt CengiaI'd love if there was a website like <a href="https://www.passkeys.io/who-supports-passkeys" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.passkeys.io/who-supports-passkeys</a> which showed which websites also support *non-resident* <a href="https://aus.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> authentication as opposed to resident <a href="https://aus.social/tags/Passkey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkey</a>. Let's reward sites that have that support!

Karl Voit :emacs: :orgmode:<a href="https://graz.social/tags/TroyHunt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TroyHunt</a> fell for a <a href="https://graz.social/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> attack on his mailinglist members: <a href="https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/</a>Some of the ingredients: <a href="https://graz.social/tags/Outlook" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Outlook</a> and its habit of hiding important information from the user and missing <a href="https://graz.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> which is phishing-resistant.Use <a href="https://graz.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> with hardware tokens if possible (<a href="https://graz.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkeys</a> without FIDO2 HW tokens are NOT phishing-resistant due to the possibility of being able to trick users with credential transfers: <a href="https://arxiv.org/abs/2501.07380" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://arxiv.org/abs/2501.07380</a>) and avoid Outlook (or <a href="https://graz.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a>) whenever possible.Further learning: it could happen to the best of us! Don't be ashamed, try to minimize risks and be open about your mistakes.Note: any 2FA is better than no 2FA at all.<a href="https://graz.social/tags/email" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#email</a> <a href="https://graz.social/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> <a href="https://graz.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://graz.social/tags/OTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTP</a> <a href="https://graz.social/tags/TOTP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TOTP</a> <a href="https://graz.social/tags/Passkey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkey</a> <a href="https://graz.social/tags/haveibeenpwned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haveibeenpwned</a> <a href="https://graz.social/tags/Ihavebeenpwned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ihavebeenpwned</a>

David NelsonPeople who use hardware security keys: Storing them in geographically diverse locations is a wise move but makes it impossible to quickly onboard. How do you keep track of where you’ve registered each key? A checklist in a spreadsheet is obvious but cumbersome. Is there a better way? (Yes I use passkeys extensively but for certain services like email, iCloud, and my password manager, a hardware option is desirable if not mandatory.) <a href="https://mastodon.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiKey</a> <a href="https://mastodon.social/tags/YubiKeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiKeys</a> <a href="https://mastodon.social/tags/FIDO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO</a> <a href="https://mastodon.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> <a href="https://mastodon.social/tags/FIDOKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDOKey</a> <a href="https://mastodon.social/tags/FIDOKeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDOKeys</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a>

Kevin Karhan :verified:<a href="https://fearness.org/@gameplayer" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gameplayer</a> Just stick with a real <a href="https://infosec.space/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> unit like a <a href="https://social.nitrokey.com/@nitrokey" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nitrokey</a> / <a href="https://infosec.space/tags/Nitrokey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nitrokey</a>, which unlike <a href="https://infosec.exchange/@yubico" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@yubico</a> <a href="https://infosec.space/tags/Yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Yubikey</a> is 100% <a href="https://infosec.space/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>'d...

Sieva 🚴🚇🏙️🌹Why do some services use passkeys as a 2nd factor, and not the *only* factor?Makes no sense.<a href="https://social.coop/tags/passkey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passkey</a> <a href="https://social.coop/tags/WebAuthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebAuthn</a> <a href="https://social.coop/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> <a href="https://social.coop/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.coop/tags/credenntials" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#credenntials</a> <a href="https://social.coop/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a>

Royce WilliamsTIL Proton dropped their maximum supported security keys (some time after mid-August 2024) from 8 to 4 keys?! (Notice the tiny "8 out of 4" label, because I had registered the maximum 8 keys)I suspect my current config will be stable until I need to explicitly delete a key, in which case I won't be able to add a replacement unless I delete five keys. 😡<a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/SecurityKeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityKeys</a> <a href="https://infosec.exchange/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> <a href="https://infosec.exchange/tags/Proton" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Proton</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸Hot take: <a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> one-time passwords (OTP) are better than <a href="https://mastodon.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkeys</a>; especially when you store the codes on a <a href="https://mastodon.social/tags/Yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Yubikey</a>. <a href="https://mastodon.social/tags/auth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#auth</a> <a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webauthn</a> <a href="https://mastodon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a>

BrandonI’ve been on Fedi for a year now and have fallen in love with the platform, so here’s my introduction! I studied computer science with a focus on RTOS and FP/PL, but I’m about to start my final semester of law school. I’ll be practicing at a boutique firm that primarily handles IP cases once I’m barred. I foilboard and I play way too many rhythm games in and out of the arcade. I contribute to open source projects where I can, and I write up my experience in <a href="https://be-far.com" rel="nofollow noopener noreferrer" target="_blank">my digital garden</a> which I’ve been maintaining for over a year now. It’s also a good place to find usage tips for projects/tools that you might want to use. <ul><li><a href="https://be-far.com/Updates.xml" rel="nofollow noopener noreferrer" target="_blank">RSS feed</a></li></ul>My passion for tech also includes privacy, and I’m an advocate for minimizing your digital footprint. GenAI is a scam and its purveyors are causing real harm while they sell it as hard as they can. Follow me for: <a href="https://social.treehouse.systems/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> <a href="https://social.treehouse.systems/tags/digitalgardening" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#digitalgardening</a> <a href="https://social.treehouse.systems/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://social.treehouse.systems/tags/lawfedi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lawfedi</a> <a href="https://social.treehouse.systems/tags/section230" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#section230</a> <a href="https://social.treehouse.systems/tags/copyright" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#copyright</a> <a href="https://social.treehouse.systems/tags/patents" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patents</a> <a href="https://social.treehouse.systems/tags/rustlang" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rustlang</a> <a href="https://social.treehouse.systems/tags/gleam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gleam</a> <a href="https://social.treehouse.systems/tags/haskell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#haskell</a> <a href="https://social.treehouse.systems/tags/RSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSS</a> <a href="https://social.treehouse.systems/tags/neovim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#neovim</a> <a href="https://social.treehouse.systems/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> <a href="https://social.treehouse.systems/tags/zotero" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zotero</a> <a href="https://social.treehouse.systems/tags/tmux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tmux</a> <a href="https://social.treehouse.systems/tags/alacritty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#alacritty</a> <a href="https://social.treehouse.systems/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://social.treehouse.systems/tags/egpu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#egpu</a> <a href="https://social.treehouse.systems/tags/qemu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#qemu</a> <a href="https://social.treehouse.systems/tags/arch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#arch</a> <a href="https://social.treehouse.systems/tags/archlinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#archlinux</a> <a href="https://social.treehouse.systems/tags/GNOME" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GNOME</a> <a href="https://social.treehouse.systems/tags/watches" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#watches</a> <a href="https://social.treehouse.systems/tags/watchmaking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#watchmaking</a> <a href="https://social.treehouse.systems/tags/obsidian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#obsidian</a> <a href="https://social.treehouse.systems/tags/obsidianmd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#obsidianmd</a> <a href="https://social.treehouse.systems/tags/thunderbird" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#thunderbird</a> <a href="https://social.treehouse.systems/tags/fpv" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fpv</a> <a href="https://social.treehouse.systems/tags/mechkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mechkeys</a> <a href="https://social.treehouse.systems/tags/mechkeeb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mechkeeb</a> <a href="https://social.treehouse.systems/tags/mechanicalkeyboard" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mechanicalkeyboard</a> <a href="https://social.treehouse.systems/tags/matrix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#matrix</a> <a href="https://social.treehouse.systems/tags/signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#signal</a> <a href="https://social.treehouse.systems/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://social.treehouse.systems/tags/passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passkeys</a> <a href="https://social.treehouse.systems/tags/dancerushstardom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dancerushstardom</a>

Royce WilliamsIt's been 12 days since I (and a few others) noticed ... and we're still unable to rename security keys within a Google Account.<a href="https://www.reddit.com/r/GoogleSupport/comments/1gahuqa/cannot_rename_fido2_security_key/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.reddit.com/r/GoogleSupport/comments/1gahuqa/cannot_rename_fido2_security_key/</a>Renaming keys is essential, to keep them identified and disambiguated.<a href="https://infosec.exchange/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://infosec.exchange/tags/SecurityKeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityKeys</a> <a href="https://infosec.exchange/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a>

ProtonYou asked, we delivered! All Proton mobile apps now support <a href="https://mastodon.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> for <a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a>. 🎉 Use security keys like YubiKey for an extra layer of protection. Here’s how: <a href="https://proton.me/support/2fa-security-key" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://proton.me/support/2fa-security-key</a>

Royce WilliamsQuick report on Porkbun FIDO / security key / passkey options:<ul><li>✅ Supports more than five keys</li><li>✅ Supports passwordless passkeys as a separate toggle-able option, but you can also add a phone using the hardware key config area</li><li>✅ You can opt into using only keys for MFA</li><li>🤷‍♂️ You can set name of each key, but names cannot be edited (only way to rename is to delete a key)</li><li>❌ Rich web-side report of auth/success failure generally, but no key-specific logging (you can't tell when each specific key was last used, IP / location / OS, etc.).</li><li>🤷‍♂️ You can opt into email notifications of successful / failed auth, which list the IP, but only say "WebAuthn Security Key" (not the specific key name)</li><li>❌ Does not prompt for a PIN when set on the key itself (WebAuthn)</li></ul><a href="https://infosec.exchange/tags/Porkbun" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Porkbun</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> <a href="https://infosec.exchange/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> <a href="https://infosec.exchange/tags/passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passkeys</a>

James Bartlett :terminal:<a href="https://lemmy.world/u/breadsmasher" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@breadsmasher</a> Great question! "Need" probably isn't the right word. "Strongly desire" or "greatly prefer" would more accurate.The reason is that I have lots of different devices with different port types. Some of my newer devices only have USB-C ports, while my older devices only have USB-A ports, and I'd really like to have just "one key to rule them all," so to speak.I know that I could buy a little USB-A/C adapter dongle and keep that on the same keychain with the MFA key, but that introduces a degree of fragility that I'd prefer to avoid if possible. That being said, if I found a hardware MFA key with all of the features I listed except for USB-C, then I'd happily accept the dongle compromise, because most of my devices (even the old ones) support Bluetooth, so I'd still have that as a backup option in case the dongle fails.<a href="https://techhub.social/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> <a href="https://techhub.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://techhub.social/tags/fido" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido</a> <a href="https://techhub.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://techhub.social/tags/fido3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido3</a> <a href="https://techhub.social/tags/NFC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NFC</a> <a href="https://techhub.social/tags/USB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USB</a> <a href="https://techhub.social/tags/USBc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USBc</a> <a href="https://techhub.social/tags/USBa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USBa</a> <a href="https://techhub.social/tags/dongle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dongle</a> <a href="https://techhub.social/tags/Biometric" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Biometric</a> <a href="https://techhub.social/tags/Fingerprint" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fingerprint</a> <a href="https://techhub.social/tags/YubiCo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiCo</a> <a href="https://techhub.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiKey</a> <a href="https://techhub.social/tags/Bluetooth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bluetooth</a> <a href="https://techhub.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://techhub.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

James Bartlett :terminal:My current hardware MFA key is no longer receiving security patches, so I'm in the market for a new one.Here's a list of features I'd like my new hardware MFA key to have, in order of priority: 1. USB-A 2. NFC 3. USB-C 4. Biometric 5. BluetoothMy current MFA key has features 1-3 and 5. Is there a Holy Grail MFA key somewhere out there with all 5 features?I'm already pretty familiar with YubiCo's product lineup, and while I love their security rating and build quality, none of them have more than 2 of the features listed above, so that kinda bums me out.Anyway, let's hear your hardware MFA key recommendations!<a href="https://techhub.social/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> <a href="https://techhub.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://techhub.social/tags/fido" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido</a> <a href="https://techhub.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://techhub.social/tags/fido3" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido3</a> <a href="https://techhub.social/tags/NFC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NFC</a> <a href="https://techhub.social/tags/USB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USB</a> <a href="https://techhub.social/tags/USBc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USBc</a> <a href="https://techhub.social/tags/USBa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USBa</a> <a href="https://techhub.social/tags/Biometric" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Biometric</a> <a href="https://techhub.social/tags/Fingerprint" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fingerprint</a> <a href="https://techhub.social/tags/YubiCo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiCo</a> <a href="https://techhub.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YubiKey</a> <a href="https://techhub.social/tags/Bluetooth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bluetooth</a> <a href="https://techhub.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://techhub.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

openSUSE LinuxWant to secure your system with Full Disk <a href="https://fosstodon.org/tags/Encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Encryption</a>? Check out the <a href="https://fosstodon.org/tags/quickstart" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#quickstart</a> guide for FDE with <a href="https://fosstodon.org/tags/TPM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TPM</a> or <a href="https://fosstodon.org/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> using YaST2 on Tumbleweed! 🔒 <a href="https://fosstodon.org/tags/openSUSE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openSUSE</a> <a href="https://fosstodon.org/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://fosstodon.org/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://news.opensuse.org/2024/09/20/quickstart-fde-yast2/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://news.opensuse.org/2024/09/20/quickstart-fde-yast2/</a>

🝬𝐢𝐭𝐚𝐥𝐢𝐞☤☿🝬𝐮ț𝐚𝐧Nitrokey 3A Mini from <a href="https://social.nitrokey.com/@nitrokey" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nitrokey</a> Receives Official FIDO2 Certification _ <a href="https://www.nitrokey.com/news/2024/nitrokey-3a-mini-receives-official-fido2-certification" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.nitrokey.com/news/2024/nitrokey-3a-mini-receives-official-fido2-certification</a> _ <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://infosec.exchange/tags/nitrokey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nitrokey</a> <a href="https://infosec.exchange/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://infosec.exchange/tags/realmmablock" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#realmmablock</a>

ProtonDid you know? 🤔You can securely log into @Proton_Pass on Android and iOS using <a href="https://mastodon.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a> for two-factor authentication (<a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a>).Here's how: <a href="https://proton.me/support/set-up-fido2-on-mobile" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://proton.me/support/set-up-fido2-on-mobile</a>

xyhhx 🔻 (plz hire me)am i missing something or does firefox not support fido 2 / passkeys?i set up an onlykey passkey with a pin on chrome, but on firefox i get "JsNotAllowed" exceptionthere's an okta support article that suggests enabling `security.webauth.enable_softtoken` or something but that has no effect<a href="https://nso.group/tags/firefox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firefox</a> <a href="https://nso.group/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://nso.group/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webauthn</a> <a href="https://nso.group/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Recent searches

Search options

Administered by:

Server stats:

#fido2