News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by heyoni on Saturday March 30, 2024 @12:28AM (#39871840)
But why won’t banks at least support customer provided yubikeys?
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by intelVISA on Saturday March 30, 2024 @02:04AM (#39872252)
Banks loathe anything relating, or adjacent, to good SWE principles.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by mulmen on Saturday March 30, 2024 @01:52AM (#39872197)
> But why won’t banks at least support customer provided yubikeys?

> support

You answered your own question.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by heyoni on Saturday March 30, 2024 @11:58AM (#39876065)
And that’s the answer isn’t it? Banks are behind the times in terms of security and tech.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by eru on Saturday March 30, 2024 @01:21AM (#39872066)
Because it's extra hassle?
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by jalk on Saturday March 30, 2024 @05:49AM (#39873333)
Bank of America supports user purchased TOTP devices.

https://www.bankofamerica.com/security-center/online-mobile-...

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by rainbowzootsuit on Saturday March 30, 2024 @08:46AM (#39874338)
Brokerage, not bank, but you can do Yubikey-only at Vanguard.

https://www.bogleheads.org/forum/viewtopic.php?t=349826

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by mlrtime on Saturday March 30, 2024 @09:04AM (#39874487)
The largest US crypto brokerages/exchanges support yubikey.

Some will provide and require them for top customers to ensure they are safe.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ryukoposting on Sunday March 31, 2024 @08:58PM (#39889802)
I'd guess part of the reason is that customers would blame the bank when their YubiKey doesn't work, which would become a nuisance for them as much as the YubiKey's usability issues are a nuisance for the customer.
[ Parent | on HN ]