OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
1–10 of 26 posts
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#2Does this apply to anyone who verified their ID to get access to the slightly less restricted Codex versions, or only to security professionals who have the almost-entirely unrestricted version?
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#3[deleted]
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#4I hope that at some point this is not developing to remote attestation when only "permitted" devices can use the models.
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#5It’s an advertisement by Yubikey - the hardware key manufacturer
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#6I hope that at some point this is not developing to remote attestation when only "permitted" devices can use the models.
We all know that's where they are going with this.
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#7I hope that at some point this is not developing to remote attestation when only "permitted" devices can use the models.
We all know that's where they are going with this.
No, that would almost certainly defeat the point of selling the models.
Hardware 2FA is not a new concept and is recommended by many people for many purposes. Only the authentication token is attested, and that is the purpose of an authentication token.
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#8It’s an advertisement by Yubikey - the hardware key manufacturer
I tried enabling their "advanced security" programme on my account and it's currently refusing to continue without at least 2 keys configured.
The first "hardware key" is actually my Bitwarden faking a hardware key (I'm sure they'll start blocking BW because of this in the future) but it doesn't let me add a second one unfortunately.
Re: OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members
#9Cobranded YubiKeys? Weird flex but ok.
Seriously though if you are letting agents do whatever they want without a PR process that requires hardware authentication or proof of presence, you are putting your code and your org at high risk.