User avatar
plautumnpus @autumn@cafe.autumn.town
1y
did everyone buy a yubikey before realising it's an open standard and you can just get them from google and other manufacturers
4
0
2
0
User avatar
Niko @niko@gts.niko.lgbt
1y
@autumn i bought one because i had a friend whose company bought too many and got four for 90 euros so i was happy with it
1
0
2
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@niko ahhh lucky, i only managed to get 1 so i'm still using totp in case i lose it lol
0
0
1
0
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn at a glance it's really hard to find alternatives. how'd you come across these?
2
0
0
0
User avatar
charlotte @halva@mk.absturztau.be
1y
@ari @autumn yubikeys are basically just a hardware passkey implementation

your google password manager, apple keychain, bitwarden, keypassxc, 1pass, etc etc all implement the same auth standards xd
1
0
2
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@halva @ari yeah bitwarden hasn't stopped bothering me about making a virtual passkey everytime i get prompted to enter my physical one lol
🧡1
2
0
1
1
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn @halva you can disable that! go to the extension > settings > notifications > ask to save and use passkeys

why this is in notifications, i have no idea.
🧡1
1
0
1
1
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari @halva IT'S IN NOTIFICATIONS? oh my GOD thank you
:ariLove@ice.arimelody.me:1
1
0
0
1
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn @halva i have to hunt this down every single time i set up the extension 😭
0
0
1
0
User avatar
charlotte @halva@mk.absturztau.be
1y
@autumn @ari unironically yubikeys are only useful as a hardware store to unlock your main password manager imo
2
0
2
0
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@halva @autumn which is pretty much what i use it for! a very expensive key to a very expensive castle
🧡1
0
0
2
1
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@halva @ari i use mine for 2FA on basically everything that supports it, its nicer than getting my phone. i still have regular totp codes on my phone in case i don't have access to my keys (or more importantly i lose it)
1
0
1
0
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn @halva i've got both set up- i use my yubikey for logging in with my linux PC, and icloud keychain when i'm on my phone or mac
0
0
1
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari actually my friend saw my yubikey on my keychain and showed me his, he has 2 from google that were £30 each (which is kinda good considering that my yubikey was £50)

store.google.com/product/titan_security_key?hl=en-GB
💜1
1
0
1
1
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari unless. that's the only alternative?? surely not???
1
0
1
0
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn i don't see many others!

i heard glimpses of the titan key but Wow google seem keen on you not finding it normally:
google store: "No results for "titan". Try a different or more general search"
1
0
1
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari if i go on amazon i can find a few but from brands i really don't recognise... i guess not many tech corps are in the business of making hardware security keys which is weird imo. feels like a product that every big company should have, at least in an enterprise setting.
💜1
1
0
1
1
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn which is bizarre!! i feel like we should at least have some open-source hobbyists out there with a 3d-printed model using parts off alibaba or something
2
0
1
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari or there should be some off-the-shelf component that does this that you can adapt for this. i know that the Google ones just use the Titan security chips that they use in Pixel phones, and i don't know if yubico are making their own silicon but it's entirely possible if they're charging 50 quid for it
1
0
1
0
User avatar
ari ariYeah @ari@ice.arimelody.me
1y
@autumn FPGA-based security key (it can run a web server if you poke at it, and it costs $200)
1
0
1
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@ari AND it's discontinued so you have to compete with everyone tryna get a Mister FPGA too 🤩
:troll@ice.arimelody.me:1
0
0
1
1
User avatar
UsernameSwift determination @usernameswift@pleromer.net
1y
@ari @autumn I know that there is an RP2040-based one
I'm sure that it could be given some sort of casing
1
0
2
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@usernameswift @ari i actually found out later a company called nitrokey makes ones with open source firmware i believe
1
0
2
0
User avatar
UsernameSwift determination @usernameswift@pleromer.net
1y
@autumn @ari Oh I've heard of them
Their laptops have always intrigued me
0
0
2
0
User avatar
gavi @gavi@wetdry.world
1y
@autumn not yet but now I know this fact and am grateful for it. Thank you for saving me a bit of money
1
0
1
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@gavi i think they don't support Everything but i believe a majority of places use FIDO and that's all you really need, i think yubikey has its own proprietary thing too that (unless im mistaken) i've never used lol
1
0
2
0
User avatar
plautumnpus @autumn@cafe.autumn.town
1y
@gavi yeah like a yubikey has a list of crap it supports but FIDO is the important one for the passwordless sign in or 2FA alternative
0
0
2
0