Live data from Hacker News

How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

blog.lessonslearned.org

71–80 of 179 posts

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#71

Does chromeOS allow you to remote wipe the box? That seems like that would be another advantage to this in the case of theft (note: definitely not in the case of the box being confiscated by a lawful authority).

If and only if the machine is enrolled and managed via the Apps Admin console.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#72
post #31

Yubikeys tend to wear out your USB ports after a bit I found, at least on my X201 and the X61 that preceded it.

Any port used frequently will wear out - they have limited life spans due to the moving parts. I see it with my external display ports pretty frequently. One potential solution is a USB hub, or even a USB extension cable you keep plugged in.

Yubikey NEO NFC!

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#73
post #57

One of the BIGGEST drawbacks using a Chromebook with 11.6 inch screen that nobody here talks about yet, is the grainy and crappy 1366 x 768 screen resolution! I've been a long time Macs guy anything inferior than RetinaDisplay will considerably straining my eyes before I am used to it. Dell XPS 13 included.

> [...] will considerably straining my eyes before I am used to it. Dell XPS 13 included.

You do realize the Dell XPS 13 has QHD as an option?

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#74

I have a potential application for a U2F keys and I'm wondering why you recommend the $18 Yubikey on Amazon versus the $10 one that is also FIDO certified. Is there a difference in the function or some other important difference?

Not the OP but, I use a $6 one without a button that simply activates on insert. Unfortunately the company that sold them is more interested in bulk sales and the stopped selling individual units. I plan to eventually replace it with the Feitian ePass NFC FIDO U2F Security Key, which is still $17 but includes NFC which I could use with my android phone. for that functionality from Yubi you would need the $50 Yubikey Neo.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#75
post #49

> When things get completely borked (which in two weeks of heavy use only happened a couple of times for me) how are people willing to live with this? I would be furious if I had to lose all my state and (for all intents and purposes) restart my machine multiple times in two weeks. And if this "borking" happens right before or during a presentation (the author was writing about using this setup for giving talks on),…

>Just pure solid Does that actually exist?

I reboot once a month, so that it reboots at all.

Despite using Arch Linux, and weekly "upgrade everything".

I know it isn't everyone's experience, but I was exceedingly choosey about the hardware that went into my machine, so that I could do this.

The only problem I've had in the last two years, was an incompatibility between ocaml and fish shell, which eliminated my PATH. Unfortunate, but an issue on the ocaml side of things. A big problem, for certain, but two years of bleeding edge updates, and that's it.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#77
post #57

One of the BIGGEST drawbacks using a Chromebook with 11.6 inch screen that nobody here talks about yet, is the grainy and crappy 1366 x 768 screen resolution! I've been a long time Macs guy anything inferior than RetinaDisplay will considerably straining my eyes before I am used to it. Dell XPS 13 included.

If you're going to compare to a Mac, it's better to look at the higher end Chromebooks like the Pixel 2, HP Chromebook 13, and Samsung Chromebook Pro. They all have screens with pixel density and quality that's on par with the 15" MacBook Pro I have.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#78
post #66

Don't do it! I got a Lenovo 14" IdeaPad N42-20 and desktop to replace my 256gb MacBook Pro. It turned out to be a bad idea, mostly because the screen is terrible. It's the same resolution as the Samsung 3 mentioned in the article. It also seems so small compared to a 15". Side-by-side windows isn't very nice, either. I find myself working less because I don't feel like sitting at my desk or using the Chromebook.

I worked with 1366x768 for years and don't really think it's THAT bad.

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#79
post #52
post #50

Earlier quoted context omitted.

Then it's separate feature from TOTP. It's not a real 2fa because it works like service>duo>user where duo can accept anything for you.

Agreed. I said "TOTP app" where I should have said "2FA app". I still think it's a second factor. Only a third party might have access to the factor too, like SMS codes/3DSecure.

Yeah it's a mess when you recommend duo/authy not clear TOTP or internal system. It's a second factor but not the one that's worth implementing: basic link to email has same security and costs $0

Re: How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security

#80

I have a potential application for a U2F keys and I'm wondering why you recommend the $18 Yubikey on Amazon versus the $10 one that is also FIDO certified. Is there a difference in the function or some other important difference?

Not the OP but, I use a $6 one without a button that simply activates on insert. Unfortunately the company that sold them is more interested in bulk sales and the stopped selling individual units. I plan to eventually replace it with the Feitian ePass NFC FIDO U2F Security Key, which is still $17 but includes NFC which I could use with my android phone. for that functionality from Yubi you would need the $50 Yubikey…

Tbf, yubikey neo has much more features than feitian epass.
Post reply on HN