News for hackers. Stuff that matters.
Re:Biometric YubiKey by donpdonp on Wednesday November 06, 2019 @04:03PM (#21467261)
Sounds like a creative new way to get locked out of your own keys.
Re:Biometric YubiKey by jolmg on Wednesday November 06, 2019 @04:06PM (#21467295)
You mean if you get a cut on the finger you registered. On this page[1], though, it says it would support "[storing] multiple fingerprints", so that should help in that case.

[1] https://www.yubico.com/products/yubikey-hardware/

Re:Biometric YubiKey by bigiain on Wednesday November 06, 2019 @06:29PM (#21468732)
Hmmm, I wonder if there's a way to set this up with a "duress" fingerprint, that'll unlock a special/different key and log you in to completely vanilla accounts instead of your real ones?
Re:Biometric YubiKey by teekert on Wednesday November 06, 2019 @05:01PM (#21467950)
That is a must, I recently started skateboarding and wipping it up and grabbing the sanding paper-like surface makes my fp scanner not work for about 2 days!
Re:Biometric YubiKey by cormacrelf on Wednesday November 06, 2019 @05:19PM (#21468162)
Hot tip for guitarists: left thumb fluctuates least.
Re:Biometric YubiKey by xahrepap on Wednesday November 06, 2019 @04:49PM (#21467822)
I currently have multiple keys. One I carry on me and one I locked in our firesafe with other important documents.

The way I see it, I would want the bio version to be the one on my person. I still have the other put away where it won't be lost.

I lose my hand? Still have a backup. I lose my key? Backup and maybe I have a little bit of extra time to update my bank MFA while the thief figures out the fingerprint situation.

Re:Biometric YubiKey by Someone1234 on Wednesday November 06, 2019 @05:13PM (#21468091)
What services even support multiple keys?

That's been my biggest struggle, I want a primary and backup key but almost every service I use only allows one at a time. I cannot duplicate the same key because it increments internally to avoid replay.

Re:Biometric YubiKey by sakisv on Wednesday November 06, 2019 @05:49PM (#21468443)
Not as many as I would like, but: google, github, hetzner, ovh, gandi, gitlab, bitwarden are some that support multiple keys.
Re:Biometric YubiKey by acheron9383 on Wednesday November 06, 2019 @07:07PM (#21469021)
I suppose for sites that only allow one, you can store their backup codes in bitwarden behind you multi-key service. Still annoying.
Re:Biometric YubiKey by tialaramex on Wednesday November 06, 2019 @05:17PM (#21468138)
Facebook, GitHub and Google are common sites which allow multiple keys.
Re:Biometric YubiKey by sowbug on Wednesday November 06, 2019 @08:57PM (#21469709)
Is there a service that limits to a single key? I've never encountered one.
Re:Biometric YubiKey by chowell on Wednesday November 06, 2019 @09:59PM (#21470001)
AWS only allows one U2F token to be registered at a time.
Re:Biometric YubiKey by notfoss on Thursday November 07, 2019 @12:57AM (#21470802)
Zoho.
Re:Biometric YubiKey by taeric on Wednesday November 06, 2019 @11:33PM (#21470405)
twitter. :(
Re:Biometric YubiKey by gleenn on Wednesday November 06, 2019 @05:17PM (#21468134)
Google does, and IIRC Github does too.