Re: [nlug] (DIY) USB Security Keys?

2021-08-26 Thread Brandon Bradley
YubiKeys are on sale today, FYI. https://slickdeals.net/f/15242767-yubico-yubikey-5-nfc-2-factor-authentication-security-keys-usb-c-2-for-55-usb-a-2-for-45-free-shipping?src=frontpage On Tue, Aug 24, 2021 at 5:15 PM Michael L wrote: > Thank you everyone for the excellent info. I'm glad I asked

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Michael L
Thank you everyone for the excellent info. I'm glad I asked. On Tue, Aug 24, 2021 at 2:45 PM Kent Perrier wrote: > IIRC, the Yubi folks do recommend getting two, and using the second one as > the backup authenticator in case the primary is lost/broken/etc. Put in a > safe/safety deposit box fo

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Kent Perrier
IIRC, the Yubi folks do recommend getting two, and using the second one as the backup authenticator in case the primary is lost/broken/etc. Put in a safe/safety deposit box for safe keeping. On Tue, Aug 24, 2021 at 2:13 PM Paul Boniol wrote: > I agree with Tilghman, but would add there are NFC v

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Paul Boniol
I agree with Tilghman, but would add there are NFC versions of Yubikey's (still without battery), and USB-C connector (which may or may not attach to your phone). If supported, it could be added as a backup authentication method, but I don't recommend using them as the primary method. (Left it at h

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Michael L
I just heard of SMS mirroring, which is good if we want to do that, but not so good if a hacker can mirror someone else's SMS and bypass 2FA. What you're describing sounds more like what I'm looking for instead of a specific hardware device. Mange Tak. On Tue, Aug 24, 2021 at 12:48 PM Tilghman L

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Tilghman Lesher
There are multiple reasons why I'm not fond of hardware keys like that: The first I've already mentioned. If it's lost or misplaced, you've just lost your way of getting into the system. Second is the form factor. It's a USB A connector, which is fine when you're sitting at a desktop or a lapto

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Michael L
That's another important reason why I'm asking: when my Pixel LCD became unusable, I couldn't login. Glad again I asked. On Tue, Aug 24, 2021, 10:08 Tilghman Lesher wrote: > I would suggest configuring PAM to use one of the myriad 2 factor > authentication schemes, preferably one that isn't ti

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Michael L
I'd go for DIY Yubi unless Yubi is just plain and simple so good that it's worth the price. I need to secure an online login that I can't really afford to get hacked. On Tue, Aug 24, 2021, 09:52 Kent Perrier wrote: > Do you mean something like a DIY Yubi key? > > On Tue, Aug 24, 2021 at 6:09 A

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Tilghman Lesher
I would suggest configuring PAM to use one of the myriad 2 factor authentication schemes, preferably one that isn't tied to a hardware key. For example, you can use a Google Authenticator scheme with an app like Authy, which will allow you to authenticate with multiple devices -- useful if you los

Re: [nlug] (DIY) USB Security Keys?

2021-08-24 Thread Kent Perrier
Do you mean something like a DIY Yubi key? On Tue, Aug 24, 2021 at 6:09 AM Michael L wrote: > I have a couple of sensitive logins which I need to keep secure online and > offline. I see multiple USB devices from about $10 and up. I also see > Google OpenSK and Predator DIY results. > > Does an

[nlug] (DIY) USB Security Keys?

2021-08-24 Thread Michael L
I have a couple of sensitive logins which I need to keep secure online and offline. I see multiple USB devices from about $10 and up. I also see Google OpenSK and Predator DIY results. Does anyone have a recommendation? Thanks everyone -- -- You received this message because you are subscribe