NitroKey ( https://www.nitrokey.com/ ) is the non-crappy version of YubiKey.
What is non-crappy about it compared to the YubiKey?
Ask HN: Alternatives to Yubikey?
41–50 of 91 posts
Re: Ask HN: Alternatives to Yubikey?
#42https://sc4.us/hsm
It's fully open-source, but the only standard application currently supported is U2F.
Disclosure: this is my product.
Re: Ask HN: Alternatives to Yubikey?
#43SecurID has been the gold standard for more than a decade.
Not to dismiss YubiKey but companies that can afford 2 factor and take security seriously already have SecurID for a long time.
Re: Ask HN: Alternatives to Yubikey?
#44It's worth considering: almost nobody who uses Yubikeys loves them, but they are by a wide margin the tokens experts recommend most.
I use my yubikey and I love it. I have it set up to do GPG, SSH, TOTP, and U2F and it works great. It is worlds better then any other Smart Card or second factor out there, and U2F is literally just plug it in and tap it.
Re: Ask HN: Alternatives to Yubikey?
#45SecurID has been the gold standard for more than a decade. Not to dismiss YubiKey but companies that can afford 2 factor and take security seriously already have SecurID for a long time.
SecurID is just an expensive TOTP implementation (although a very established one, as you noted)
That "gold standard" required reissuing 40 millions of devices in 2011 due to a single server breach. Lockheed-Martin was apparently really, really happy about it, too.
If that's your desired level of security, just use any TOTP authenticator app on your smartphone.
Re: Ask HN: Alternatives to Yubikey?
#46It's worth considering: almost nobody who uses Yubikeys loves them, but they are by a wide margin the tokens experts recommend most.
I use my yubikey and I love it. I have it set up to do GPG, SSH, TOTP, and U2F and it works great. It is worlds better then any other Smart Card or second factor out there, and U2F is literally just plug it in and tap it.
The U2F bit is a dream, yes. The rest of it not so much.
Re: Ask HN: Alternatives to Yubikey?
#47It's worth considering: almost nobody who uses Yubikeys loves them, but they are by a wide margin the tokens experts recommend most.
I use my yubikey and I love it. I have it set up to do GPG, SSH, TOTP, and U2F and it works great. It is worlds better then any other Smart Card or second factor out there, and U2F is literally just plug it in and tap it.
Have you got a writeup of the ssh setup methodology you used?
(I've tried scouting around, but not found anything clear yet. Someone's done native support in ssh, but the patch set is hung up on licensing issues and technical quibbles[1], and some of the PAM-based setups seem to require cut-and-paste of crypto strings on every login.)
Re: Ask HN: Alternatives to Yubikey?
#48Out of curiosity... is Google Authenticator dead? The iOS app hasn't been updated in quite a while (Feb 22, 2016).
Re: Ask HN: Alternatives to Yubikey?
#49Out of curiosity... is Google Authenticator dead? The iOS app hasn't been updated in quite a while (Feb 22, 2016).
Does it need an update?
Re: Ask HN: Alternatives to Yubikey?
#50Earlier quoted context omitted.
The problem is largely with their docs, or lack thereof. Just figuring out how to use one as a token for ssh is incredibly painful. The docs are very "enterprise," meaning half-done, overly complicated, confusing, scattered, etc.
It is extraordinarily annoying to set up a Y4 for SSH. We use gpg-agent in ssh-agent compat mode.
It would be better if they supported the OpenSSH PKI format.