News for hackers. Stuff that matters.

A comment on We should have the ability to run any code we want on hardware we own. Parent comment

Re:We should have the ability to run any code we want on har... by oigursh on Monday September 01, 2025 @08:45AM (#45092306)
Can you explain your motivation around gpg-agent and yubikey little more, please? So the private key can't be copied elsewhere?
[ Parent | on HN ]
Re:We should have the ability to run any code we want on har... by tadfisher on Monday September 01, 2025 @02:51PM (#45095502)
Yes, that's the motivation.

These days I would explore the TPM option, but I'm worried that has less legal teeth than a physical key if I'm in a law enforcement situation.

There's also practicality; I really, really don't want to tell my boss that TSA or whoever had access to the company git repositories and databases for X minutes or hours, and that's sidestepped by checking a bag with the Yubikey (wastes their time) or mailing it to the destination (needs a warrant).

[ Parent | on HN ]