News for hackers. Stuff that matters.

A comment on Lastpass Security Incident. Parent comment

Re:Lastpass Security Incident by Too on Thursday December 01, 2022 @12:16AM (#33812623)
Isn’t this a yubikey? Except a yubikey can also do a lot more, primarily sign tokens without private key ever leaving the device.

Which, as someone else explained below, is far superior to plain text passwords.

[ Parent | on HN ]
Re:Lastpass Security Incident by MetaWhirledPeas on Thursday December 01, 2022 @01:27AM (#33813023)
Yubikey is really great, but it's for 2FA, not password storage. My thought was to replace cloud password managers.
[ Parent | on HN ]
Re:Lastpass Security Incident by jve on Thursday December 01, 2022 @04:59AM (#33814334)
You can set static password for yubikey double click. But then it is only a single factor - something you own and just doubleclick to input that key. https://www.yubico.com/resources/glossary/static-password/
[ Parent | on HN ]