Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Yubico is merging with ACQ Bure and intends to go public

yubico.com

Post reply on HN
Print view View original

121–130 of 222 posts

Re: Yubico is merging with ACQ Bure and intends to go public

#121

Post by pinewurst »

codetrotter wrote: post #119
user3939382 wrote: post #103

The problem with going public is that performance is now measured quarterly. This incentivizes mortgaging the long-term health of the company for short-term gains. Brand loyalty and trust become assets that can be profitably liquidated by diluting the quality of products and services. By the time customers catch on and the company falters, the investors/owners that profited financially, and managers that profited on…

> The problem with going public is that performance is now measured quarterly. The company I work for did not IPO yet either, and we still do performance reviews every quarter. So idk if going public matters much in that regard.

There’s a difference though between you doing internal quarterly reviews and being held to account by Wall Street analysts and hedge funds looking for perceived weakness.

Re: Yubico is merging with ACQ Bure and intends to go public

#123

Post by JohnFen »

lotsofpulp wrote: post #100
nly wrote: post #95

Earlier quoted context omitted.

This is a strange argument. A profitable company that isn't growing (selling more stuff, hiring more people, etc) can have a stable (low) P/E and still pay a nice dividend.

The point is that when you go to invest your money for your retirement, you are going to pick whichever business’s shares give you the highest ROI. You, as a shareholder, are not optimizing for > keep your customers happy, get your money, enjoy your life... So why would you expect businesses to behave in a way other than maximizing ROI?

Plenty of people, myself included, don't pick investments based solely on what has the highest ROI. Some even pick investments based in part on whether or not they agree with the way the company is run.

Re: Yubico is merging with ACQ Bure and intends to go public

#124

Post by yjftsjthsd-h »

lotsofpulp wrote: post #100
nly wrote: post #95

Earlier quoted context omitted.

This is a strange argument. A profitable company that isn't growing (selling more stuff, hiring more people, etc) can have a stable (low) P/E and still pay a nice dividend.

The point is that when you go to invest your money for your retirement, you are going to pick whichever business’s shares give you the highest ROI. You, as a shareholder, are not optimizing for > keep your customers happy, get your money, enjoy your life... So why would you expect businesses to behave in a way other than maximizing ROI?

> So why would you expect businesses to behave in a way other than maximizing ROI?

If I had invested in a company, I would prefer them to maximize my return over a span of decades, not over the next quarter by inevitably undercutting their long-term performance. For some reason, the market currently favors short-term gains in a way that inevitably compromises long-term results.

Re: Yubico is merging with ACQ Bure and intends to go public

#125

Post by codetrotter »

widowlark wrote: post #120
codetrotter wrote: post #119

Earlier quoted context omitted.

> The problem with going public is that performance is now measured quarterly. The company I work for did not IPO yet either, and we still do performance reviews every quarter. So idk if going public matters much in that regard.

who defines your quarterly goals as a private company?

My bosses and their bosses and their bosses and so on. Probably the board as well, in the end.

I’m a simple Software Engineer, so I don’t really have much insights into that whole side of things.

Re: Yubico is merging with ACQ Bure and intends to go public

#126

Post by ridgered4 »

labcomputer wrote: post #117
ckdarby wrote: post #96

Earlier quoted context omitted.

Cross key syncing service. You plug both yubikeys in. Authenticate on both keys using the tool and then you're able to transfer/backup. Corporate management offerings around Yubikeys, inventories, call back home to renew an expiry if the yubikey itself when touched should give out the information. Trust me, if Yubikey hires me and goes IPO it is all downhill but the company will make a boatload more money. Every comp…

> Cross key syncing service. Can’t work with FIDO/U2F, I’m afraid. The protocol works a little differently than most people expect, which is what allows the hardware token to “store” an unlimited number of auth credentials. What really happens at auth time is that the server (the one you are trying to authenticate to) sends a crypto package including the challenge and a key used to sign the challenge to the token. (T…

Does anything prevent copying the token's private key to another token right now?

Re: Yubico is merging with ACQ Bure and intends to go public

#127

Post by jrib »

rootio wrote: post #15
dboreham wrote: post #8

Time for an open source u2f token.

Like SoloKeys? The Solo 2 has a firmware written in Rust: https://solokeys.com

I purchased a few solo key 2s but have ended up pretty disappointed. Keys ended up being delivered with bent usb connectors which worries me that they will break prematurely.

And the documentation, at least when I received the keys, felt incomplete and hard to find; it did not give me confidence in the product.

I still use them as a backup key, but I decided to just by two yubikeys as my main keys.

Re: Yubico is merging with ACQ Bure and intends to go public

#129

Post by mindslight »

no_time wrote: post #17
dboreham wrote: post #8

Time for an open source u2f token.

The idea of authenticator hardware is inherently hostile to DIY and open source because you cannot produce or extract a keypair to generate valid attestation statements. Unless you are part of the cartel of course. https://w3c.github.io/webauthn/#attestation-statement

Attestation isn't a necessary requirement of an authentication token, and is inherently hostile to user freedom.

If some knobsite wants to insist on me using a "hardware authentication key" (similar to how many currently insist on using email/SMS codes), but I want to set it up so that secret is stored in my browser because that site isn't so important to me, setting my own security policy that directly contradicts their wishes should be my right. Their control shouldn't extend onto my own computers(s), with the demarcation point being the Internet itself.

Re: Yubico is merging with ACQ Bure and intends to go public

#130

Post by JohnFen »

no_time wrote: post #17
dboreham wrote: post #8

Time for an open source u2f token.

The idea of authenticator hardware is inherently hostile to DIY and open source because you cannot produce or extract a keypair to generate valid attestation statements. Unless you are part of the cartel of course. https://w3c.github.io/webauthn/#attestation-statement

> The idea of authenticator hardware is inherently hostile to DIY and open source

The authenticator hardware that I use every day is a device I built myself.

Post reply on HN