Sean Dennis wrote to All <=-
Hi everyone,
I have thought about using a Yubikey for limiting root access to my BBS server. Are any of you using a Yubikey or something similar? I know
that Slackware supports the use of a Yubikey via third-party software.
If you're using one, what do you think about it?
I have thought about using a Yubikey for limiting root access to my BBS server. Are any of you using a Yubikey or something similar? I know
that Slackware supports the use of a Yubikey via third-party software.
If you're using one, what do you think about it?
...Now you have to get off the couch, go to the front door
& grab your keys, walk back to your laptop, insert the
yubikey & press the button, then walk back to the front
door to put your keys back so that you're not looking for
them in a panic the next morning.
Is that a key fob for keyless entry? If so, then you shouldn't
keep one of those near the door at all. Just wondering, 'cuz
you mentioned that you have a new car, and I would imagine that
some new cars offer keyless start.
There was a very cool YT video of a seminar where a fellow
demo'd how *any* key fob signal can be compromised.
It's astonishing how poor the security (ie. no encryption) is for
those things.
Sean Dennis wrote to All <=-
I have thought about using a Yubikey for limiting root access to my BBS server. Are any of you using a Yubikey or something similar? I know
that Slackware supports the use of a Yubikey via third-party software.
Warpslide wrote to Sean Dennis <=-
All-in-all, a very 1st-world problem that after awhile just made it not worth it for me. I use Google Authenticator for everything that
supports it, that way I can just grab my phone which is usually with me
to enter the codes, or even use a desktop client that also supports
TOTP codes if you don't want to use your phone.
thecivvie wrote to Sean Dennis <=-
I use Yubikey and do as you say, using Ubuntu and Mate. And as a 2Fa
for social media etc. Love the keys. Got 3. I would recommend buying 2
so in case you lose one, you have a backup
Warpslide wrote to Sean Dennis <=-
Maybe if you usually log into your server from the same computer and
had the Yubikey handy at that computer the experience may be better.
August Abolins wrote to Warpslide <=-
Is that a key fob for keyless entry? If so, then you shouldn't
keep one of those near the door at all. Just wondering, 'cuz
you mentioned that you have a new car, and I would imagine that
some new cars offer keyless start.
While hardware 2FA is pretty nifty, I'd think that SSH keys would be sufficient.
Sean Dennis wrote to All <=-
I have thought about using a Yubikey for limiting root access to my BBS server. Are any of you using a Yubikey or something similar? I know that Slackware supports the use of a Yubikey via third-party software.
While hardware 2FA is pretty nifty, I'd think that SSH keys would be sufficient.
... Am I any closer to finding what I'm looking for?
August Abolins wrote to Warpslide <=-
Is that a key fob for keyless entry? If so, then you shouldn't
keep one of those near the door at all. Just wondering, 'cuz
you mentioned that you have a new car, and I would imagine that
some new cars offer keyless start.
From Wikipedia (https://en.wikipedia.org/wiki/YubiKey):
"The YubiKey is a hardware authentication device manufactured by Yubico to protect access to computers, networks, and online services that supports one-time passwords, public-key cryptography, and authentication, and the Universal 2nd Factor (U2F) and FIDO2 protocols developed by the FIDO Alliance. It allows users to securely log into their accounts by emitting one-time passwords or using a FIDO-based public/private key pair generated by the device. YubiKey also allows for storing static passwords for use at sites that do not support one-time passwords. Both Google and Facebook use Yubikey devices to secure employee accounts as well as end user accounts. Some password managers support YubiKey. Yubico also manufactures the Security Key, a similar lower cost device with only FIDO/U2F support."
With the hundreds of passwords I use and my server(s), a Yubikey would be a big help for me.
Later,
Sean
... Santa's elves are just a bunch of subordinate Clauses.
Kurt Weiske wrote to Sean Dennis:
While hardware 2FA is pretty nifty, I'd think that SSH keys would be sufficient.
It's not just SSH keys that I'm thinking about; it's the ability to keep
all of my passwords with me at all times and not just for my own equipment.
I also want to use 2FA with various websites that a SSH key will not work with (I'd rather carry around a Yubikey than depend on this POS cell phone
I have and Google Authentiate).
In my case, if it wasn't for everything else I want, SSH keys would be sufficient.
Later,
Sean
For the morbid curios, most of what qualifies as "sensitive information" are
actually short stories and horse wallpapers XD
Also worth mentioning is the Nitrokey in this context. I feel like buying one
so I can write a review. Not that I am very fond of these things for regular
users.
I personally keep my passwords stored in a password manager hosted in a personal server. That way I can access my passwords from any computer on which
I have the SSH keys required to access the server.
That's why I also have this fancy schmancy Faraday Box:
https://www.amazon.ca/Faraday-FOXNSK-Leather-Blocker-Anti-
Theft/dp/B088TNW G1N
...Opened the box and started the car, then closed the box
again. After about 30 seconds the "No Key Detected"
message came back and wouldn't let me shift out of park.
...Here's where it gets interesting: If I unlatch the box
but keep the box closed, the AirTag will receive the signal
to play a sound, but still can't be located. So I suspect
the latch plays a role in either completing the cage or
just holding the box closed tight enough for the protection
to work.
Either way, it's a neat little box that kept me amused for
about 45 minutes testing various scenarios.
..So it is encrypted between the car & FOB, it's
just receiving a some help extending the range between the two.
There was another one I saw where someone could capture the
signal over the air to unlock the doors and "replay" it as
many times as they wanted to unlock a car. THAT is just
poor design!
From Wikipedia (https://en.wikipedia.org/wiki/YubiKey):
With the hundreds of passwords I use and my server(s), a
Yubikey would be a big help for me.
Hundreds? Really?
I'd be afraid that the such a yubikey device gets electrically compromised, or lost. I've developed apparently "dead" usb
thumb drives at the least convenient moments. I've also lost a
couple of usb drives detaching from my key chain.
I've came up with a formula for most sites that I need to
access with a password based on the sitenames. That way my
"yubikey" is in my head, and I can always figure out the
password based on the formula. I actually have 3 different
formulas depending on how many syllables are in the sitename or
how many distinct words are part of the company name.
For inconsequential sites, I let my browser remember them.
Sean Dennis wrote to thecivvie <=-
thecivvie wrote to Sean Dennis <=-
I use Yubikey and do as you say, using Ubuntu and Mate. And as a 2Fa
for social media etc. Love the keys. Got 3. I would recommend buying 2
so in case you lose one, you have a backup
Good and glad it works for you ... and a good idea having multiple backups. Something I didn't consider.
I did something exactly like that by inserting a layer of
folded tin foil in my wallet, and the touchless/proximity POS
that did not pick up on any cards.
Yes.. the keyless ignition fobs emit a signal constantly. The
batteries in those things probably need more frequent changes
than the typical fob then?
Ok.. so if the key is in the ignition, does it still emit? I
would hope that the emitter is disabled, otherwise the signal
is broadcast to anyone passing you on the highway.
That *is* interesting. So.. if the lid is tightly closed, but
unlatched, then some signal still leaks?
Not according to the fellow who was able to hack fob and
garage-door opener signals. Most fob signals emit a pattern of
serial numbers that are easy to figure out.
I had one backup before and dropped the macbook air which landed on the
key and made bits of it. Thankfully the spare allowed me in and also able to reset when I added 2 keys as spare. Macbook was saved by the Yubico key literally :)
With the hundreds of passwords I use and my server(s), a
Yubikey would be a big help for me.
Hundreds? Really?
I'd be afraid that the such a yubikey device gets electrically compromised, or lost.
That's where account recovery comes in. If you forget your password you can
reset it. If your MFA token (whether physical or digital) can't be used, you
are usually given recovery codes, which I then save in my password
manager.
Some sites are a PITA to recover from MFA. Like Linkedin for example I
had
to scan my driver's license & sent it to them to get my account back. Years
later they had a data breach, so I feel super good about that decision...
Like Sean, I'd have at least one spare MFA token in a safe place.
Learned that lesson the hard way.
I was involved in that data breach at LinkedIn also. :/
I bought a stainless steel wallet which I actually quite
liked. It was supposed to block RFID signals as well, but
I never tested it. The problem was the corners were kind
of sharp and scratched the hell out of the screen on my
phone!
Yes.. the keyless ignition fobs emit a signal constantly..
It's just a CR2032 battery, which Ford says *should* last 3
to 4 years. The other half has a Honda civic & had to
replace the battery after 2 years.
The FOB just has to be inside the cabin, there isn't
anywhere to insert it. Mostly for me it's either in my
pocket or I throw it in the cup holder.
And the FOB needs to be in the cabin the entire time you're
driving, otherwise the car will just come to a stop. So I
don't know if it constantly broadcasts or just beacons from
time-to-time.
That *is* interesting. So.. if the lid is tightly closed, but
unlatched, then some signal still leaks?
Another thing I read was people keeping their keys in the
microwave. I put my keys in there and I was still able to
communicate with my bluetooth tracker. So either I have a
really crappy microwave that leaks radiation or that
faraday cage only blocks microwaves & not bluetooth?
"The new system uses a sleep mode that sends the fob to
sleep if it remains motionless for 40 seconds and wakes it
up once it detects movement and is within 6.5m of the car."
So it sounds like I may not need the faraday box for when
I'm home, though I'll use it anyway.
As for walking about, it sounds like the FOB sleeps until
it's within rage of the car, so walking around the grocery
store should be safe. There are also faraday pouches you
can buy, but I doubt I'll go that far.
I've seen people with hard cases for their credit cards. Some
have sharper edges than others. And I wouldn't want to remember
to carry *two* containers: one for my money and another for the
cards.
Sean Dennis wrote to thecivvie <=-
thecivvie wrote to Sean Dennis:
I had one backup before and dropped the macbook air which landed on the
key and made bits of it. Thankfully the spare allowed me in and also able to reset when I added 2 keys as spare. Macbook was saved by the Yubico key literally :)
That's what I'm talking about. I'd even keep a Yubikey in my safe just
in case.
I always carry my stuff in a small bag with pokets, anyway,
and LOTS of keys. I have so many keys and keyrings that my
problem is how to carry them without compromising the
phone's screen... the bag allows me to put the keyrings in
different pockets than the things that could get scratched.
Same goes for the faraday card case.
I've use a password manager for several years & have
accumulated just over 400 items in mine.
Other things are more important like my Gmail account. For
most of my accounts I don't know my password. I've used my
password manager to generate the password and it's stored
in there.
Some sites are a PITA to recover from MFA. Like Linkedin
for example I had to scan my driver's license & sent it to
them to get my account back. Years later they had a data
breach, so I feel super good about that decision...
Hello Arelor!
** On Thursday 10.06.21 - 18:14, Arelor wrote to August Abolins:
I always carry my stuff in a small bag with pokets, anyway,
and LOTS of keys. I have so many keys and keyrings that my
problem is how to carry them without compromising the
phone's screen... the bag allows me to put the keyrings in
different pockets than the things that could get scratched.
Same goes for the faraday card case.
Well.. you are a very important person between operating a drug
dispensary and assisting in an IT department.
Myself.. I can easily misplace a thumbdrive from one coat
pocket to the next. Keys are relatively simple (everything is
on one ring), but one particular spare shop key is stand-alone.
Typically it is meant to stay in the key slot on the INSIDE
when I lock up. But sometimes that darn key ends up travelling
home with me, and then I promptly forget to bring it with me
when I go to the shop!
I also have an iPod that I would use for making calendar
reminders and check the time, but that device too sometimes
ends up forgotten at home or forgotten at the shop!
Now.. the Blackberry is a bit different. It's my mobile data
device. I can leave it at home 'cuz I don't really need it
when travelling. But I got a nice belt-clip pouch for it so
that it gets a little protection from scratches and can easily
travel with me if necessary. But I dare not detach that device
from my belt or it may end up forgotten! :/
--
../|ug
I solved the problem of leaving keys every here and there
by adopting a simple policy:
*EVERYTHING* is put in the bag, so when I take the bag with
me, I am guaranteed I carry *EVERYTHING* with me. That
means keys, the wallet, more keys, the phones, and more
keys.
That way you don'tpick the bag believeing you have somke
set of keys in it, only to discover you forgot that
particular set on your bed.
And, for the record, there are backups of the keys :-)
*EVERYTHING* is put in the bag, so when I take the bag with
me, I am guaranteed I carry *EVERYTHING* with me. That
means keys, the wallet, more keys, the phones, and more
keys.
Ah... When men use a purse, it's called a bag! :D
| Sysop: | deepend |
|---|---|
| Location: | Calgary, Alberta |
| Users: | 240 |
| Nodes: | 10 (0 / 10) |
| Uptime: | 28:52:25 |
| Calls: | 1,461 |
| Files: | 3,366 |
| Messages: | 359,785 |