News for hackers. Stuff that matters.

A comment on YubiKey 4C. Parent comment

Re:YubiKey 4C by tptacek on Monday February 13, 2017 @10:56AM (#13636171)
I'm not saying the 4C doesn't do U2F. It's the same as the 4. I'm saying that if all you want to do is log into web services, you probably don't want the Y4.
[ Parent | on HN ]
Re:YubiKey 4C by sedatk on Monday February 13, 2017 @12:38PM (#13637103)
more features can even be harmful as in default OTP mode of those devices: https://hackernoon.com/avoid-leaking-your-identity-with-yubi...
[ Parent | on HN ]
Re:YubiKey 4C by nickik on Monday February 13, 2017 @04:04PM (#13638756)
Its a good thing to think about, but I don't see it as a huge problem. I had a Yubikey Nano plugged into my laptop almost constantly and I do trigger the OTP sometimes, but using that as an attack vector is pretty hard, specially for all the sticks that are not always plugged in.
[ Parent | on HN ]