News for hackers. Stuff that matters.

A comment on Linux Hardening Guide. Parent comment

Re:Linux Hardening Guide by praptak on Thursday December 31, 2020 @03:31AM (#25590756)
You can bootstrap key exchange from a short-lived password. Not perfect but at least limits the attack time window.

Companies serious about security just have a trusted person hand out hardware with signed keys on it.

[ Parent | on HN ]
Re:Linux Hardening Guide by andi999 on Thursday December 31, 2020 @03:39AM (#25590797)
So is there a backup of the key on the hardware somewhere (in case it gets lost or destroyed)
[ Parent | on HN ]
Re:Linux Hardening Guide by praptak on Thursday December 31, 2020 @03:53AM (#25590885)
Once you have exchanged the keys nothing stops you from creating new ones. You can for example register an additional backup Yubikey.
[ Parent | on HN ]