News for hackers. Stuff that matters.

A comment on An Advanced Intro to GnuPG. Parent comment

Re:An Advanced Intro to GnuPG by adisbladis on Tuesday June 06, 2017 @04:42AM (#14495707)
This is not my experience at all.. Most people I talk to about this loves their Yubikeys including myself.

I guess they have gotten a lot of flack for not being fully open source but in my experience most people are OK with this.

[ Parent | on HN ]
Re:An Advanced Intro to GnuPG by amingilani on Tuesday June 06, 2017 @07:19AM (#14496373)
That's what I meant. From what I can recall on HN articles in the past, they hate them because it's closed source. Even this article says they're bad.
[ Parent | on HN ]
Re:An Advanced Intro to GnuPG by j_s on Tuesday June 06, 2017 @09:36AM (#14497082)
Yubikey originally supported an open source applet that ran on a proprietary runtime. A positive for this partially open source approach was that a serious bug was found in the applet (PIN bypass) and they had to do a recall. They have since switched to 100% proprietary.

https://developers.yubico.com/ykneo-openpgp/SecurityAdvisory...

I think they catch more flack because of the switch than they would have if they had been completely proprietary the entire time! (Even though the original open source applet couldn't be trusted completely since it ran on a proprietary runtime, the same way many do not trust open source Android software on phones due to proprietary cellular hardware.)

https://www.yubico.com/2016/05/secure-hardware-vs-open-sourc...

[ Parent | on HN ]