News for hackers. Stuff that matters.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by mbeasley on Monday September 24, 2018 @09:05AM (#18057310)
It's smart to buy two at the same time. While you can't copy a Yubikey, you can choose how to initialize them and you can initialize both identical to one another and then lock them down. That way they're copies of one another and fully backed up. I keep my main one on me at all times and have my backup in a safe place.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by teagee on Monday September 24, 2018 @09:19AM (#18057390)
Do you have a link to the docs that shows this? From what I can find on their site [1] it only supports a few of the protocols:

-Static Password

-HMAC-SHA1 Challenge-Response

-OATH-TOTP (Yubico Authenticator)

[1] https://support.yubico.com/support/solutions/articles/150000...

Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by justinc8687 on Monday September 24, 2018 @12:05PM (#18058828)
It works very well for TOTP, just initialize all the keys at the same time. You can also print the qr code on paper as an additional layer of backup which makes it easier to add a new key if you destroy yours. Obviously if it was lost, you’d want to invalidate that and reset it up, but if run over by a truck and you’re holding the pieces, it’s easier than setting up all of them again.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by jwr on Monday September 24, 2018 @09:31AM (#18057476)
IMHO the YubiKey is not useful for any of those. It's excellent for storing OpenPGP keys and U2F, reasonably good for X.509 (as much as expected for X.509 I guess), and not good for much else. Using it for TOTP IMHO makes no sense, it's better to use your phone.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by jfim on Monday September 24, 2018 @10:36AM (#18058026)
Using it for TOTP makes sense if you have more than one phone or want to use TOTP on your desktop through Yubico authenticator.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by jdeibele on Monday September 24, 2018 @02:28PM (#18060064)
Authy is excellent for this. I've got it on my phone and tablet. I'm reluctant to use it on my desktop because I don't want to type in a huge password but I regard my 2015 MacBook as less secure than my devices that are protected by touch. You might be OK with that or have a laptop with touch ID.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by Boulth on Monday September 24, 2018 @02:11PM (#18059905)
Exactly. Additionally phones can be rooted and that exposes the underlying secret but Yubikeys are tamper resistant.
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by emlun on Tuesday September 25, 2018 @03:12PM (#18069488)
That won't work for U2F or FIDO2, unfortunately, since the master key is not configurable. You need to enroll both keys with each new service, sadly.