Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L...
by sweden on Tuesday May 22, 2018 @12:01PM
(#17126923)
But an Yubikey is a passive and isolated device: it doesn't turn itself on, it doesn't run any apps, it doesn't connect to the internet. And if it gets compromised (stolen or exploited), it's cheap enough to throw it away and to replace it with a new and improved version without any hassle.
[ Parent
| on HN ]
Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L...
by zaroth on Tuesday May 22, 2018 @12:27PM
(#17127157)
Stealing a Yubikey gives you immediate access to the 2nd factor, and I might not notice right away.
Stealing my iPhone gives you almost zero chance of accessing the second factor, I would notice a lot quicker, and I could revoke access (remote wipe) with a single click versus having to re-enroll a new 2FA at every single site individually.