21–30 of 80 posts
Even with this problem, using the keys for U2F is safer than SMS two factor auth. Possibly also safer than authentication app on phone, which could be compromised in various ways.
Earlier quoted context omitted.
Much safer than a TOTP authentication app, which is susceptible to phishing attacks, unlike U2F.
I had to switch back from Yubikey to TOTP because AWS' CLI tools doesn't work with U2F. This really annoys me.
That at least keeps more of your MFA key material on the hardware token and off of your phone / other shared devices.
The easiest way to do that is via the ykman CLI or Yubico Authenticator application (TOTP secrets stored on the key via either method go to the same place, so you can use both interfaces to access the same codes):
https://support.yubico.com/hc/en-us/articles/360016614940-Yu...
https://www.yubico.com/products/services-software/download/y...
I hope this will be taken into account into future products, as of course hardware is hard to fix.
Earlier quoted context omitted.
I had to switch back from Yubikey to TOTP because AWS' CLI tools doesn't work with U2F. This really annoys me.
At risk of telling you something you already know: you can use the TOTP mode on the Yubikey, if you’re looking to use it for AWS secrets despite AWS’s lack of support for U2F for CLI workflows. That at least keeps more of your MFA key material on the hardware token and off of your phone / other shared devices. The easiest way to do that is via the ykman CLI or Yubico Authenticator application (TOTP secrets stored on…
Note, Google in typical fashion has named 6+ products "Titan." (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version). The various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes d…
Note, Google in typical fashion has named 6+ products "Titan." (Titan M, Titan C, Titan Security Key (available in USB A, C, Bluetooth versions), Titan Security Module, OpenTitan, and maybe a few more if you count the old Bluetooth versions that were recalled that look identical to the new Bluetooth version). The various Titan Security Keys are also made by Feitian who sometimes use the same auth chip and sometimes d…
I still don't understand which titan keys I have and whether this affects them.
Titan BT or NFC -> Physically not OK, but remote attacks still impossible so unless you're targeted and somehow got access to your fob, it doesn't matter.