Shakedown Social

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸<a href="https://mastodon.social/@pupeno" class="u-url mention" rel="nofollow noopener" target="_blank">@pupeno</a> kinda feels like <a href="https://mastodon.social/tags/passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkeys</a> ought to stay encrypted by a device's secure enclave. Those seem a lot more safe. Passkeys don't feel like much of an improvement over OTP on my <a href="https://mastodon.social/tags/Yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubikey</a>, so I haven't switched yet.

Sass, DavidMe: Uhh a <a href="https://infosec.exchange/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> let's add it to my <a href="https://infosec.exchange/tags/EntraID" class="mention hashtag" rel="nofollow noopener" target="_blank">#EntraID</a> accountMicrosoft: NOT SO FASTMe: 🤬🤬🤬

Bryan Whitehead<a href="https://infosec.exchange/@tychotithonus" class="u-url mention" rel="nofollow noopener" target="_blank">@tychotithonus</a> They are totally blowing the opportunity to have a pumpkin spice <a href="https://macaw.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a>

JonatanWith USB/IP, I can now use my YubiKey remotely via SSH in the same way as I was sitting in front of my machine. Both in early boot stage (initrd); unlocking LUKS encrypted filesystem, and in booted system stage; signing git commits and authenticate to GitHub. Great! But what about using FIDO2/WebAuthn via RDP to log in to web services? USB redirection is not supported for xrdp. Is there any workarounds coming up to for example redirect WebAuthn from one machine to another?<a href="https://defcon.social/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a> <a href="https://defcon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener" target="_blank">#fido2</a> <a href="https://defcon.social/tags/usbip" class="mention hashtag" rel="nofollow noopener" target="_blank">#usbip</a> <a href="https://defcon.social/tags/rdp" class="mention hashtag" rel="nofollow noopener" target="_blank">#rdp</a> <a href="https://defcon.social/tags/nixos" class="mention hashtag" rel="nofollow noopener" target="_blank">#nixos</a> <a href="https://defcon.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

Maikel 🇪🇺 🇪🇸Trick 1: If you use the latest and greatest Bitwarden from UNSTABLE channel of Nixos you get this very HANDY option that allows you to never have to open and close again and again and again Bitwarden Desktop (just leave it started) to SSH into any of the servers you store the keys on Bitwarden. It has to be the version from unstable channel though. Trick 2: If you enable master password re-prompt and your unlocking mechanism of Bitwarden vault is a yubikey you enjoy super-extra-mega security then. You might like this option <a href="https://bsd.network/@dch" class="u-url mention" rel="nofollow noopener" target="_blank">@dch</a> Now these two settings merge conveniency and security. <a href="https://vmst.io/tags/Bitwarden" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bitwarden</a> <a href="https://vmst.io/tags/Yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubikey</a>

shac ron ₪‎It would be nice if my <a href="https://ioc.exchange/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a> stopped murdering my MacBook battery while it’s sleeping

Zack WeinbergI'm betting the answer here is "this isn't possible" but if anyone knows how to tell OpenSSH that when it's enumerating pubkeys it should check which of the two known authentication dongles is actually plugged into the computer, and only prompt me to unlock the SK key that belongs to that dongle, not both of them, please tell me how.<a href="https://masto.hackers.town/tags/openssh" class="mention hashtag" rel="nofollow noopener" target="_blank">#openssh</a> <a href="https://masto.hackers.town/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a>

🧿🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻🇺🇸Explain <a href="https://mastodon.social/tags/passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkeys</a> to me like I'm your grandparents.<a href="https://mastodon.social/tags/2fa" class="mention hashtag" rel="nofollow noopener" target="_blank">#2fa</a> <a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/fido" class="mention hashtag" rel="nofollow noopener" target="_blank">#fido</a> <a href="https://mastodon.social/tags/webauthn" class="mention hashtag" rel="nofollow noopener" target="_blank">#webauthn</a> <a href="https://mastodon.social/tags/fido2" class="mention hashtag" rel="nofollow noopener" target="_blank">#fido2</a> <a href="https://mastodon.social/tags/otp" class="mention hashtag" rel="nofollow noopener" target="_blank">#otp</a> <a href="https://mastodon.social/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a> <a href="https://mastodon.social/tags/password" class="mention hashtag" rel="nofollow noopener" target="_blank">#password</a> <a href="https://mastodon.social/tags/auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#auth</a>

JayViiDoes anyone have experience with either <a href="https://social.jayvii.de/tags/Yubikey" class="hashtag" rel="nofollow noopener" target="_blank">#Yubikey</a>, <a href="https://social.jayvii.de/tags/Nitrokey" class="hashtag" rel="nofollow noopener" target="_blank">#Nitrokey</a> or any other hardware security token for both <a href="https://social.jayvii.de/tags/MFA" class="hashtag" rel="nofollow noopener" target="_blank">#MFA</a>/<a href="https://social.jayvii.de/tags/2FA" class="hashtag" rel="nofollow noopener" target="_blank">#2FA</a> as well as <a href="https://social.jayvii.de/tags/encryption" class="hashtag" rel="nofollow noopener" target="_blank">#encryption</a> via <a href="https://social.jayvii.de/tags/PGP" class="hashtag" rel="nofollow noopener" target="_blank">#PGP</a>/<a href="https://social.jayvii.de/tags/GPG" class="hashtag" rel="nofollow noopener" target="_blank">#GPG</a> or <a href="https://social.jayvii.de/tags/SMIME" class="hashtag" rel="nofollow noopener" target="_blank">#SMIME</a>?In particular, I am looking at the <a href="https://shop.nitrokey.com/de/shop/nk3an-nitrokey-3a-nfc-147?search=nitrokey+3#attr=" rel="nofollow noopener" target="_blank">Nitrokey 3A NFC</a>. As far as I can tell, Yubico only sells <a href="https://social.jayvii.de/tags/MFA" class="hashtag" rel="nofollow noopener" target="_blank">#MFA</a> tokens(?), unless the <a href="https://www.yubico.com/de/product/yubikey-5-fips-series/yubikey-5-nfc-fips/" rel="nofollow noopener" target="_blank">YubiKey 5 FIPS Series</a> can hold encryption keys as well?Both price and open hardware aspect definitely speak for Nitrokey, but I do not know anyone who owns such a token... Anyone who I can talk to?

Royce WilliamsTIL that Pure Storage issues YubiKeys branded with their logo!(eBay, not my listing:)<a href="https://www.ebay.com/itm/135898756327" rel="nofollow noopener" translate="no" target="_blank">https://www.ebay.com/itm/135898756327</a>Interesting: Just over the side of the logo, the phrase "NO NFC" is seen (not sure if an add-on label, or part of the logo). NFC-enabled keys ship with NFC disabled by default until first power-up (and can be re-disabled in <code>ykman</code> <code>-R</code> / <code>--restrict</code> option):<a href="https://www.yubico.com/getting-started/" rel="nofollow noopener" translate="no" target="_blank">https://www.yubico.com/getting-started/</a>... so I'm not sure if this means NFC is permanently disabled, but it seems likely. Will update when I get one.<a href="https://infosec.exchange/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a>

The Chris DantesFuck <a href="https://social.linux.pizza/tags/Authy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authy</a>. Fuck it in it's stupid ass. They got rid of the desktop version. Fine. It sucks, but I could deal with it. Then they dropped support for <a href="https://social.linux.pizza/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#GrapheneOS</a>. Meaning I'm locked out of everything. Luckily I have a <a href="https://social.linux.pizza/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> so I can get into most things. I guess it's time to move to something else.

Mad A. Argon :qurio:I realized I didn't wear <a href="https://is-a.cat/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a> on chain on my neck for 8 days (because of circumstances). And this is absolutely record for me, it was never so long until now! Does it mean I have a problem? :neofox_laugh_tears_256:I have it on me now. I couldn't feel so... naked? without armor? anymore.<a href="https://is-a.cat/tags/nerd" class="mention hashtag" rel="nofollow noopener" target="_blank">#nerd</a> <a href="https://is-a.cat/tags/MagicalThinking" class="mention hashtag" rel="nofollow noopener" target="_blank">#MagicalThinking</a>

ÖlbaumSo, <a href="https://tooting.ch/tags/passkey" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkey</a> question:Is it possible that a web site that has been supporting YubiKeys for a while would automatically support Safari’s and 1Password’s passkeys, by means of it being webauthn in both cases, or at least appear to support them, even if it fails later?That would explain some of the ignorance of customer service agents when you point out how their passkey implementation is broken.<a href="https://tooting.ch/tags/passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkeys</a> <a href="https://tooting.ch/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://tooting.ch/tags/webauthn" class="mention hashtag" rel="nofollow noopener" target="_blank">#webauthn</a> <a href="https://tooting.ch/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a>

Kevin Karhan :verified:<a href="https://mk.absturztau.be/@Linux" class="u-url mention" rel="nofollow noopener" target="_blank">@Linux</a> there are 3 big options you forgot that I know of which too ain't under <a href="https://infosec.space/tags/Cloudact" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloudact</a> aka. have no subsidiary/office/parent company in the <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener" target="_blank">#USA</a>: <ul><li><a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> (email, messaging, managed <a href="https://infosec.space/tags/nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#nextcloud</a> hosting)</li><li><a href="https://mstdn.social/@Stuxhost" class="u-url mention" rel="nofollow noopener" target="_blank">@Stuxhost</a> (eMail & <a href="https://mastodon.xyz/@nextcloud" class="u-url mention" rel="nofollow noopener" target="_blank">@nextcloud</a> )</li><li><a href="https://social.nitrokey.com/@nitrokey" class="u-url mention" rel="nofollow noopener" target="_blank">@nitrokey</a> (a better alternative to <a href="https://infosec.exchange/@yubico" class="u-url mention" rel="nofollow noopener" target="_blank">@yubico</a> / <a href="https://infosec.space/tags/Yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubikey</a>) </li></ul>And for <a href="https://infosec.space/tags/PasswordManagers" class="mention hashtag" rel="nofollow noopener" target="_blank">#PasswordManagers</a>, there's also <a href="https://infosec.space/tags/Enpass" class="mention hashtag" rel="nofollow noopener" target="_blank">#Enpass</a> for those that don't like <a href="https://infosec.space/tags/KeePassXC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeePassXC</a> / <a href="https://infosec.space/tags/KeepPassDX" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeepPassDX</a> / <a href="https://infosec.space/tags/KeePass" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeePass</a> and for organizations there's even <a href="https://infosec.space/tags/Passbolt" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passbolt</a> as a centrally manageable solution. All of these allow <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> & <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> on-premise.

RobynMein <a href="https://chaos.social/tags/yubikey" class="mention hashtag" rel="nofollow noopener" target="_blank">#yubikey</a> wird in <a href="https://chaos.social/tags/keepassxc" class="mention hashtag" rel="nofollow noopener" target="_blank">#keepassxc</a> nicht mehr erkannt bzw erkannt aber nicht mehr gelesen. 😥😵‍💫🙈<a href="https://chaos.social/tags/PCSC" class="mention hashtag" rel="nofollow noopener" target="_blank">#PCSC</a> läuft. Hab das auch nochmal neu installiert. Aber hat nichts gebracht. 😵‍💫Hat jemensch eine Idee wie ich das fixen könnte? 😅🙈 <a href="https://chaos.social/tags/eh22" class="mention hashtag" rel="nofollow noopener" target="_blank">#eh22</a>

Privacy GuidesIf you are looking for a good password manager you can use from anywhere, there are plenty of excellent options to choose from. However, if you prefer to only store your passwords locally, KeePassXC is what you need. In our latest tutorial, we'll walk through setting up KeePassXC to work with your YubiKey as an additional factor to secure your local-only password database.<a href="https://www.privacyguides.org/articles/2025/03/18/installing-keepassxc-and-yubikey/" rel="nofollow noopener" translate="no" target="_blank">https://www.privacyguides.org/articles/2025/03/18/installing-keepassxc-and-yubikey/</a><a href="https://mastodon.neat.computer/tags/KeePassXC" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeePassXC</a> <a href="https://mastodon.neat.computer/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://mastodon.neat.computer/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.neat.computer/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mastodon.neat.computer/tags/KeePass" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeePass</a> <a href="https://mastodon.neat.computer/tags/KeePassX" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeePassX</a> <a href="https://mastodon.neat.computer/tags/PrivacyGuides" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacyGuides</a> <a href="https://mastodon.neat.computer/tags/Article" class="mention hashtag" rel="nofollow noopener" target="_blank">#Article</a>

Cyberduck 🐣New tutorial on how to connect to SFTP with private key stored on <a href="https://fosstodon.org/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://docs.cyberduck.io/tutorials/sftp_publickeyauth_yubikey/" rel="nofollow noopener" translate="no" target="_blank">https://docs.cyberduck.io/tutorials/sftp_publickeyauth_yubikey/</a>

Em :official_verified:New Privacy Guides article 🔑✨ by me: If you are using a YubiKey, you might get in some situations where you need to reset your key to factory default, and/or set up a backup of it on a spare key.This tutorial will guide you through each step to reset and back up your YubiKey successfully, with clear instructions and plenty of visual support.I hope you find it helpful!<a href="https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/" rel="nofollow noopener" translate="no" target="_blank">https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/</a><a href="https://infosec.exchange/tags/PrivacyGuides" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacyGuides</a> <a href="https://infosec.exchange/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://infosec.exchange/tags/Yubico" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubico</a> <a href="https://infosec.exchange/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/OTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTP</a> <a href="https://infosec.exchange/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPGP</a> <a href="https://infosec.exchange/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryption</a> <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>

Privacy GuidesAlways remember, when it comes to hardware security keys: Two is one, one is none.Our latest article covers the setup process for two YubiKeys (from Yubico's YubiKey 4 or 5 series) to keep your online accounts safe and secure 🔒 + it goes through resetting your existing keys to a blank slate, and the reasons you might want to do so!<a href="https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/" rel="nofollow noopener" translate="no" target="_blank">https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/</a><a href="https://mastodon.neat.computer/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://mastodon.neat.computer/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a> <a href="https://mastodon.neat.computer/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mastodon.neat.computer/tags/Yubico" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubico</a> <a href="https://mastodon.neat.computer/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.neat.computer/tags/PrivacyGuides" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacyGuides</a> <a href="https://mastodon.neat.computer/tags/Article" class="mention hashtag" rel="nofollow noopener" target="_blank">#Article</a>

David NelsonPeople who use hardware security keys: Storing them in geographically diverse locations is a wise move but makes it impossible to quickly onboard. How do you keep track of where you’ve registered each key? A checklist in a spreadsheet is obvious but cumbersome. Is there a better way? (Yes I use passkeys extensively but for certain services like email, iCloud, and my password manager, a hardware option is desirable if not mandatory.) <a href="https://mastodon.social/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://mastodon.social/tags/YubiKeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKeys</a> <a href="https://mastodon.social/tags/FIDO" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO</a> <a href="https://mastodon.social/tags/FIDO2" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDO2</a> <a href="https://mastodon.social/tags/FIDOKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDOKey</a> <a href="https://mastodon.social/tags/FIDOKeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#FIDOKeys</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a>

Recent searches

Search options

Administered by:

Server stats:

#yubikey