News for hackers. Stuff that matters.
Re:A Hidden Cost of Ransomware: Wholesale Password Theft by Filligree on Thursday January 09, 2020 @08:38AM (#22001039)
I attempted to use a Yubikey with GitHub, but when I tried to enable it, Windows gave me an on-screen "soft" 2F dialog instead of making any use of the device at all.

Seems related to something called "Hello"? Either way, I haven't found a way to disable it. Caveat emptor.

Re:A Hidden Cost of Ransomware: Wholesale Password Theft by tialaramex on Thursday January 09, 2020 @10:42AM (#22002071)
Because GitHub obeys the part of the spec. which says sites need to allow multiple credentials, you should still be able to get where you're going (I haven't seen this "Hello" pathway) via a circuitous route.

1. Let the Hello stuff happen, GitHub will propose that you name it, why not "Hello".

2. Tell GitHub you want to enroll another token. The system will automatically disregard "Hello" because that was already enrolled, so this time it will enroll your Yubikey or whatever other tokens.

3. (Optionally, if you don't want "Hello" e.g. because it isn't your Windows PC you just borrowed it) Tell GitHub you want to remove "Hello".

Re:A Hidden Cost of Ransomware: Wholesale Password Theft by Fnoord on Thursday January 09, 2020 @09:46AM (#22001579)
With which browser?
Re:A Hidden Cost of Ransomware: Wholesale Password Theft by Filligree on Thursday January 09, 2020 @01:44PM (#22004125)
This was a while ago, so I don't quite remember. Either Chrome or Firefox.