Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN
by taubek on Sunday September 18, 2022 @01:57AM
(#32884808)
How do you configure Yubikey to enter password for unlocking 1password? Is this a Yubikey feature or 1password feature? Does this also work with mobile devices (phones)?
[ Parent
| on HN ]
Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN
by loulouxiv on Sunday September 18, 2022 @04:09AM
(#32885495)
That is the hid mode parent is mentionning.
With ykman you can configure the Yubikey to simulate being a USB keyboard (Human Interface Device) and then "type" a static password. The default setting is to type a Yubico specific OTP that can be checked by calling an API. The issue with the static password is that anybody getting near the yubikey with a device having a USB port can steal the password in seconds.
Re:Show HN: A virtual Yubikey device for 2FA/WebAuthN
by sig-io on Sunday September 18, 2022 @08:34AM
(#32887014)
And any accidental button-press while in a chat-app or website will leak your password. I've seen many yubikey otp's accidentally pasted into irc, if you set it to password, you just posted that. I'd never recommend using that mode.