11–20 of 222 posts
Earlier quoted context omitted.
Very. They are a tiny Swedish company that pay for top talent, are quite active and hands-on in the netsec community. It's not a faceless corporation with a Chinese PO Box.
US government had a nice little swedish cryptography company there for a bit too...
I have an irrational concern about using security products from a company post-merger or acquisition. It has never ended well for me as an anecdotal user. Going public is taking that worry even further. Make keys, sell keys. The end. What's there to raise funding for? Build yet another password vault?
Anyone has insights into how trustworthy is Yubico? Their firmware is opaque, not shared outside the company, so is their hardware (important for RNGs etc).
Very. They are a tiny Swedish company that pay for top talent, are quite active and hands-on in the netsec community. It's not a faceless corporation with a Chinese PO Box.
I have an irrational concern about using security products from a company post-merger or acquisition. It has never ended well for me as an anecdotal user. Going public is taking that worry even further. Make keys, sell keys. The end. What's there to raise funding for? Build yet another password vault?
Time for an open source u2f token.
Time for an open source u2f token.
[1] https://www.tillitis.se/tkey/
Otherwise, in a more traditional yubikey-replacement design, I've had my eye on the onlykey but their github has very little activity which makes me worried its a dead project.
Time for an open source u2f token.
Time to crank the monetizing tap, add a mandatory monthly subscription to everything and deprecate well-working gear
You could buy a programmable open source security key instead, they recently opened their shop. https://tillitis.se/ Some of the people behind Mullvad VPN are associated with it.
> Tillitis is wholly owned by Amagicom AB and is a spin-off from the sister company Mullvad VPN
Time for an open source u2f token.