YubiKey 4C • Hacker News Board

Re: YubiKey 4C

#11

Post by baccredited » Mon, Feb 13, 2017, 3:04 PM UTC

Do any of these RSA alternatives have an LCD display showing the id? Our work computers are locked down and USB is not an option.

Re: YubiKey 4C

#12

Post by cafebabbe » Mon, Feb 13, 2017, 3:05 PM UTC

serg_chernata wrote: post #7

It looks neat, can someone share personal experience or recommendations? Is this worth it? Is there a better alternative?

Had one, loved it, then lost it, then hated it.

Re: YubiKey 4C

#13

Post by Freak_NL » Mon, Feb 13, 2017, 3:07 PM UTC

eecc wrote: post #4

I still don't get how people are ok using these things without a fingerprint reader...

Why? This is the hardware factor in a two-factor authentication scheme. Someone purloining your YubiKey would still need a PIN or password to proceed in most 2FA schemes. The only thing biometrics would add is preventing someone from physically taking your YubiKey and abusing it along with the knowledge factor gleaned from you. That is a valid concern in some specialized cases, but certainly not the common use case 2FA aims to address.

And even if it was; if someone is willing to physically intervene in your security by stealing your YubiKey, chances are they are willing to 'coerce' you to cooperate with unlocking a biometric lock as well…

Re: YubiKey 4C

#14

Post by NikolaNovak » Mon, Feb 13, 2017, 3:08 PM UTC

Do they work any better on iPhones?

-----

I decided couple of months ago to secure entire family. Bought half dozen Neos, worked out all the kinks on my computer + Android phone first, put everything in LastPass (I know, I know, I know... but you have to consider the target audience ;).... only to discover on "go-live" that my wife's iPhone 6s is bloody useless with the thing. Apparently iPhone doesn't fully grok NFC or something? Not sure... :-/

Re: YubiKey 4C

#15

Post by Nullabillity » Mon, Feb 13, 2017, 3:09 PM UTC

Kind of useless to have a C-only device this early. An A/C-hybrid would be much more useful, like Kingston's MicroDuo[1] series.

[1]: http://www.kingston.com/us/usb/personal_business/DTDUO3C

Re: YubiKey 4C

#16

Post by tckr » Mon, Feb 13, 2017, 3:09 PM UTC

Make the price $5 and these will sell.

Re: YubiKey 4C

#17

Post by kentiko » Mon, Feb 13, 2017, 3:10 PM UTC

Nullabillity wrote: post #15

Kind of useless to have a C-only device this early. An A/C-hybrid would be much more useful, like Kingston's MicroDuo[1] series. [1]: http://www.kingston.com/us/usb/personal_business/DTDUO3C

It's an authentication key, not a flash drive.

Re: YubiKey 4C

#18

Post by michaelmior » Mon, Feb 13, 2017, 3:11 PM UTC

kentiko wrote: post #17

Nullabillity wrote: post #15

Kind of useless to have a C-only device this early. An A/C-hybrid would be much more useful, like Kingston's MicroDuo[1] series. [1]: http://www.kingston.com/us/usb/personal_business/DTDUO3C

It's an authentication key, not a flash drive.

The same point still applies.

Re: YubiKey 4C

#19

Post by abhv » Mon, Feb 13, 2017, 3:12 PM UTC

alternative is u2fzero, available on amazon for 8$, and totally open source. the difference is that yubi uses an nxp secure coprocessor, whereas the u2fzero uses atmel. there is the possibility of side-channel attacks on the u2fzero.

but for your family, it is better than nothing and much more cost effective.

Re: YubiKey 4C

#20

Post by Freak_NL » Mon, Feb 13, 2017, 3:13 PM UTC

NikolaNovak wrote: post #14

Do they work any better on iPhones? ----- I decided couple of months ago to secure entire family. Bought half dozen Neos, worked out all the kinks on my computer + Android phone first, put everything in LastPass (I know, I know, I know... but you have to consider the target audience ;).... only to discover on "go-live" that my wife's iPhone 6s is bloody useless with the thing. Apparently iPhone doesn't fully grok NFC…

Apple decided that users cannot use the NFC chip in it except for Apple Pay (for the foreseeable future). You don't really 'own' an Iphone in that sense.