Re:Biometric YubiKey
by donpdonp on Wednesday November 06, 2019 @04:03PM
(#21467261)
Sounds like a creative new way to get locked out of your own keys.
[ Parent
| on HN ]
You mean if you get a cut on the finger you registered. On this page[1], though, it says it would support "[storing] multiple fingerprints", so that should help in that case.
Hmmm, I wonder if there's a way to set this up with a "duress" fingerprint, that'll unlock a special/different key and log you in to completely vanilla accounts instead of your real ones?
That is a must, I recently started skateboarding and wipping it up and grabbing the sanding paper-like surface makes my fp scanner not work for about 2 days!
Re:Biometric YubiKey
by cormacrelf on Wednesday November 06, 2019 @05:19PM
(#21468162)
Hot tip for guitarists: left thumb fluctuates least.
I currently have multiple keys. One I carry on me and one I locked in our firesafe with other important documents.
The way I see it, I would want the bio version to be the one on my person. I still have the other put away where it won't be lost.
I lose my hand? Still have a backup. I lose my key? Backup and maybe I have a little bit of extra time to update my bank MFA while the thief figures out the fingerprint situation.
Re:Biometric YubiKey
by Someone1234 on Wednesday November 06, 2019 @05:13PM
(#21468091)
What services even support multiple keys?
That's been my biggest struggle, I want a primary and backup key but almost every service I use only allows one at a time. I cannot duplicate the same key because it increments internally to avoid replay.
Not as many as I would like, but: google, github, hetzner, ovh, gandi, gitlab, bitwarden are some that support multiple keys.
Re:Biometric YubiKey
by acheron9383 on Wednesday November 06, 2019 @07:07PM
(#21469021)
I suppose for sites that only allow one, you can store their backup codes in bitwarden behind you multi-key service. Still annoying.
Re:Biometric YubiKey
by tialaramex on Wednesday November 06, 2019 @05:17PM
(#21468138)
Facebook, GitHub and Google are common sites which allow multiple keys.
Is there a service that limits to a single key? I've never encountered one.
AWS only allows one U2F token to be registered at a time.
Zoho.
twitter. :(