Thought some of you that are not on the Linux Aust mail list might be interested in this
---------- Forwarded message ---------- From: Russell Coker <russ...@coker.com.au> Date: 6 May 2010 14:59 Subject: [Linux-aus] Yubikeys To: Linux Australia List <linux-...@lists.linux.org.au> http://etbe.coker.com.au/2010/03/15/yubikey/ Yubico have offered a 20% educational discount rate for the purchase of Yubikeys (as described in my above blog post) to "your club", I think it would be best to arrange a purchase for all LUGs in Australia (I guess that LA can be my "club"). This would involve one person from each state taking orders, collecting money, and having a single address where the keys can be posted. Delivering the keys to the owners at a LUG meeting would be best for keeping the cost down - posting a single-key interstate would probably increase the price by 10% or more. In a brief summary of what the Yubikey does, it is an authentication token that looks like a USB keyboard and provides a one-time password when a button is pressed. Among other things using such a device makes it significantly more difficult for a trojan to crack your account when you use an Internet Cafe. Yubikeys ship with a secret that supports authentication via the Yubico server, which incidentally is what I'm using for admin access to my blog - I feel that a password in addition to a key authenticated by Yubico is secure enough. I plan to run my own authentication server in the future and not trust Yubico. It would be quite possible for a LUG to run their own Yubi authentication server for members to access their site services (as has already been requested for LUV). But I think that it would probably be more convenient for everyone for a LUG to use OpenID and allow members to use their own OpenID server that supports Yubikey authentication (such as a Wordpress blog with the Yubikey and OpenID plugins). https://store.yubico.com/ The regular prices (in $US) are advertised on the above URL. It's $1,500 for a pack of 100 keys that are pre-programmed with secret keys for authentication with Yubico (the easy way of using them) and the pouches etc. Yubico have offered me a price of $12 per key for 100+ keys, that probably will be about $14 Australian including postage. A new option has just appeared on the Yubico store page, packs of 50 keys that are unprogrammed and which don't have the packaging for $12 each - I haven't yet asked but I expect that some sort of discount would be available on them too, if it's a 20% discount then that would make it $9.60 per key. Would anyone be prepared to pay $US2.40 extra for the nice packaging and the ability to use the Yubico authentication server? Or should we go with the assumption that every LUG member either has the technical skills to program their own key and run an authentication server or can get someone else to do so? We could buy both types of key if we have orders for 100+ regular keys and some number of 50 packs of raw keys that's not a float. The cost of a single key is $25 + $5 shipping. So we are talking about a discount price being less than half the RRP of a single key, and as little as 1/3 if they are bought raw! This issue has been discussed by the LA committee and they have agreed in concept. The details of how the finances work out are yet to be resolved. I think that if we get over a few hundred keys then it might be best to have LA manage the ordering and payment as having many thousands of dollars from LUGs go through my bank account could get inconvenient. But I am prepared to do it all myself if necessary. -- russ...@coker.com.au http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog _______________________________________________ linux-aus mailing list linux-...@lists.linux.org.au http://lists.linux.org.au/listinfo/linux-aus -- [WWW] http://quail.southernvaleslug.org/ "The significant problems we face cannot be solved at the same level of thinking we were at when we created them" - Albert Einstein -- ubuntu-au mailing list ubuntu-au@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-au