News for hackers. Stuff that matters.

A comment on YubiKey 4C.

Re:YubiKey 4C by baccredited on Monday February 13, 2017 @10:04AM (#13635716)
Do any of these RSA alternatives have an LCD display showing the id? Our work computers are locked down and USB is not an option.
[ Parent | on HN ]
Re:YubiKey 4C by drewg123 on Monday February 13, 2017 @10:50AM (#13636121)
The OTP functions basically as a USB HID keyboard. So you can plug it into something that is not locked down (like a phone or tablet), and then just copy the code.

The drawback is that the code could be long. A few years ago, the codes were just 6 digits. My latest nano spits out a very long (20 char?) alpha-numeric string.

[ Parent | on HN ]
Re:YubiKey 4C by pmoriarty on Tuesday February 14, 2017 @01:18AM (#13641604)
I wouldn't mind a 20 char string. I regularly type passphrases significantly longer than that.
[ Parent | on HN ]
Re:YubiKey 4C by jalude on Monday February 13, 2017 @12:44PM (#13637163)
You can have it behave like a keyboard and simply 'type' the characters of the one time password in. I don't know how locked down your systems but usually keyboards are allowed.
[ Parent | on HN ]
Re:YubiKey 4C by fuzzybeard on Monday February 13, 2017 @11:02AM (#13636228)
Is it just Mass Storage that'd disabled in USB or the ports themselves?
[ Parent | on HN ]