News for hackers. Stuff that matters.
Re:Getting the most out of YubiKeys for your business by ses1984 on Wednesday June 17, 2020 @10:58PM (#23559364)
You should have to enter a pin to unlock the yubikey and if you fail so many times it can be locked forever.
Re:Getting the most out of YubiKeys for your business by burrben on Wednesday June 17, 2020 @11:08PM (#23559404)
If you are using the PIV applet of the Yubikey, then yes, a PIN is required. Failing the specified number of retries will result in the device being locked. The PIN can be unlocked with a PUK. Failing the specified number of retries with the PUK will brick the PIV applet. You can reset the PIV applet but all previous data will have been wiped.