Re:Ask HN: Bank with Yubikey support?
by guenthert on Wednesday April 27, 2022 @06:06PM
(#31186414)
Solution in search of a problem or just plain advertising? I rather see banks use some sensible authentication standard (perhaps, not necessarily, 2FA; likely, but preferably not using passwords), then a random for-profit company's product. Yubikeys are first and foremost baffling expensive.
[ Parent
| on HN ]
Re:Ask HN: Bank with Yubikey support?
by sd37489sdf on Wednesday April 27, 2022 @07:34PM
(#31187127)
Please follow the guidelines for commenting and assume good faith: https://news.ycombinator.com/newsguidelines.html
In particular, 2FA is not a standard but rather a collection of techniques, some of them standards. Yubikeys implement a good number of them. When someone asks a question like this one, I take it to mean "Bank with WebAuthn support", which is in fact a standard, and I'd also like to know if one exists that also lets you selectively disable other weaker factors.
I'm aware that 2FA is not a standard. I meant to write "a standard perhaps, not necessarily using 2FA", but I fumbled the editing. My bad.
And no, here I cannot assume good faith, sorry.
Re:Ask HN: Bank with Yubikey support?
by RockRobotRock on Wednesday April 27, 2022 @06:14PM
(#31186498)
You think YubiKey needs to advertise on a message board for paranoid tech nerds?
nobody just found out about yubikey from this thread...
> a message board for paranoid tech nerds?
Ah, this explains why I feel at home in this community.
Re:Ask HN: Bank with Yubikey support?
by aaaaaaaaata on Thursday April 28, 2022 @10:51AM
(#31193167)
Don't worry, you're not paranoid, you're just not missing relevant knowledge, or a mouthbreather.
Re:Ask HN: Bank with Yubikey support?
by aaaaaaaaata on Thursday April 28, 2022 @04:55PM
(#31198078)
PS consider dropping Keybase
Thanks for the advice! Had forgotten to remove it from here.
Re:Ask HN: Bank with Yubikey support?
by CodeWriter23 on Wednesday April 27, 2022 @07:30PM
(#31187100)
$8-$50 is "baffling expensive"? I think if it protects a few grand in the bank, well worth it. If you don't have a few grand in the bank, I think maybe yeah any non-free 2FA solution becomes "expensive".