Whistleblower: Ubiquiti Breach “Catastrophic”

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by Quiark on Tuesday March 30, 2021 @09:39PM (#26642619)

Exactly, no workflow for terraform or CLI if you have U2F (Yubikey) 2FA.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by BillinghamJ on Wednesday March 31, 2021 @04:21AM (#26644737)

That's not true. You can use AWS SSO with the CLI/SDKs (therefore including stuff like Terraform) with webauthn.

It briefly pops you out to a browser to authenticate and caches a short lived token locally

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by darkr on Wednesday March 31, 2021 @02:53AM (#26644231)

If you use federated auth, then you can do whatever you want; 10 UDF keys and a video of a special dance if you so desire

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by nijave on Wednesday March 31, 2021 @09:53PM (#26655786)

There's AssumeRoleWithSAML so you can use any IdP

There's tools like aws-okta that can advantage of that to supply short lived credentials which require 2FA

You could also write a service that requires whatever authentication you want and returns the results of STS AssumeRole

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by Hnrobert42 on Tuesday March 30, 2021 @11:59PM (#26643368)

I really want to like U2F, but it’s use cases seem so limited.

[ Parent | on HN ]