Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

245
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#yubikey

2 posts2 participants0 posts today
Public
Zack Weinberg

I'm betting the answer here is "this isn't possible" but if anyone knows how to tell OpenSSH that when it's enumerating pubkeys it should check which of the two known authentication dongles is actually plugged into the computer, and only prompt me to unlock the SK key that belongs to that dongle, not both of them, please tell me how.

#openssh#yubikey
Public
JayVii

Does anyone have experience with either #Yubikey, #Nitrokey or any other hardware security token for both #MFA/#2FA as well as #encryption via #PGP/#GPG or #SMIME?

In particular, I am looking at the Nitrokey 3A NFC. As far as I can tell, Yubico only sells #MFA tokens(?), unless the YubiKey 5 FIPS Series can hold encryption keys as well?

Both price and open hardware aspect definitely speak for Nitrokey, but I do not know anyone who owns such a token... Anyone who I can talk to?

shop.nitrokey.comNitrokey 3A NFC
Public *
Royce Williams

TIL that Pure Storage issues YubiKeys branded with their logo!

(eBay, not my listing:)

ebay.com/itm/135898756327

Interesting: Just over the side of the logo, the phrase "NO NFC" is seen (not sure if an add-on label, or part of the logo). NFC-enabled keys ship with NFC disabled by default until first power-up (and can be re-disabled in ykman -R / --restrict option):

yubico.com/getting-started/

... so I'm not sure if this means NFC is permanently disabled, but it seems likely. Will update when I get one.

Closeup of YubiKey in a transparent antistatic bag. Key is oriented "portrait", angled away. Through the bag, the QR-like code, the serial, the "FIPS" label, and the PureStorage logo can be seen.
The Pure Storage logo - an orange hexagon as if drawn with a very thick line, with soft corners, and with a break in the lower-right, as if that side had been shortened but leaving the bottom each horizontal. The effect is like a very fat P.
#YubiKey
Public
Ölbaum

So, #passkey question:

Is it possible that a web site that has been supporting YubiKeys for a while would automatically support Safari’s and 1Password’s passkeys, by means of it being webauthn in both cases, or at least appear to support them, even if it fails later?

That would explain some of the ignorance of customer service agents when you point out how their passkey implementation is broken.

#passkeys#security#webauthn
Replied in thread
Public *
Kevin Karhan :verified:

@Linux there are 3 big options you forgot that I know of which too ain't under #Cloudact aka. have no subsidiary/office/parent company in the #USA:

And for #PasswordManagers, there's also #Enpass for those that don't like #KeePassXC / #KeepPassDX / #KeePass and for organizations there's even #Passbolt as a centrally manageable solution. All of these allow #SelfCustody & #SelfHosting on-premise.

Public
Privacy Guides

If you are looking for a good password manager you can use from anywhere, there are plenty of excellent options to choose from. However, if you prefer to only store your passwords locally, KeePassXC is what you need. In our latest tutorial, we'll walk through setting up KeePassXC to work with your YubiKey as an additional factor to secure your local-only password database.

privacyguides.org/articles/202

www.privacyguides.org · KeePassXC + YubiKey: How to set up a local-only password manager
More from Em :official_verified:
#KeePassXC#YubiKey#Security
Public
Em :official_verified:

New Privacy Guides article 🔑✨
by me:

If you are using a YubiKey,

you might get in some situations where you need to reset your key to factory default, and/or set up a backup of it on a spare key.

This tutorial will guide you
through each step to reset and back up your YubiKey successfully, with clear instructions and plenty of visual support.

I hope you find it helpful!

privacyguides.org/articles/202

Photo of a YubiKey security key on a table between a MacBook computer and a cellphone.
#PrivacyGuides#Privacy#Yubico
Public
Privacy Guides

Always remember, when it comes to hardware security keys: Two is one, one is none.

Our latest article covers the setup process for two YubiKeys (from Yubico's YubiKey 4 or 5 series) to keep your online accounts safe and secure 🔒 + it goes through resetting your existing keys to a blank slate, and the reasons you might want to do so!

privacyguides.org/articles/202

www.privacyguides.org · How to Reset Your YubiKey and Create a Backup
More from Em :official_verified:
#YubiKey#HardwareSecurity#Privacy
Public
David Nelson

People who use hardware security keys: Storing them in geographically diverse locations is a wise move but makes it impossible to quickly onboard. How do you keep track of where you’ve registered each key? A checklist in a spreadsheet is obvious but cumbersome. Is there a better way? (Yes I use passkeys extensively but for certain services like email, iCloud, and my password manager, a hardware option is desirable if not mandatory.) #YubiKey #YubiKeys #FIDO #FIDO2 #FIDOKey #FIDOKeys #Security

ExploreLive feeds
About