News for hackers. Stuff that matters.
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by droopyEyelids on Friday April 16, 2021 @07:50PM (#26840307)
https://www.yubico.com/support/download/yubikey-personalizat...

you can do a lot with a yubikey but idk if you can actually change the U2F secret

Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by tialaramex on Friday April 16, 2021 @08:37PM (#26840604)
You can tell the device you want a new random secret (so now your existing credentials don't work), but you can't get the secret out (obviously bad guys would use that, so it would be a terrible idea) neither can you set the current one to an explicit value.
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by PeterisP on Sunday April 18, 2021 @07:13PM (#26857443)
You definitely can initialize Yubikey OATH-TOTP with a known value in order to have multiple devices with identical secrets. I have done that, also see https://support.yubico.com/hc/en-us/articles/360016614880-Ca...
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by desmond373 on Friday April 16, 2021 @09:18PM (#26840811)
So you can set the current one at the start of your use and keep the secret hidden somewhere forever. Sounds like the solution to me.
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by tialaramex on Friday April 16, 2021 @09:22PM (#26840832)
Evidently the way I wrote this previously wasn't clear enough, so I have attempted to improve this text.

No, you can have a random new value (effectively like you bought a different one), but you won't learn what that is, so it doesn't help you and there's no way to "keep the secret hidden somewhere" except in the sense that it's hidden inside the device where it belongs.