News for hackers. Stuff that matters.

A comment on Study: 'Security Fatigue' May Weaken Digital Defenses. Parent comment

Re:Study: 'Security Fatigue' May Weaken Digital Defenses by baby_souffle on Monday March 23, 2026 @11:42AM (#47491056)
> And no one in the security business seems to consider the overall burden of yet another step. Each of which is simple in by itself, but cumulatively they are a giant hassle, and so people look for workarounds.

This is a tale as old as time. At a prior gig, IT took away touch ID for ... $reasons. ~40% of the engineering team was already big into mechanical keyboards so it only took one person to "just FYI, VIA allows you to program macros". Is it _as bad_ as password on a sticky note? Not quite but I can't imagine that touch ID was _more_ of a threat.

[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by sam_lowry_ on Monday March 23, 2026 @11:54AM (#47491223)
A big use case for Yubikeys is the ability to emulate a keyboard and produce a string of chars on touch.
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by pimlottc on Monday March 23, 2026 @12:18PM (#47491570)
It's a very handy fea-ccccccvklhfgjhckcnkdnhgkcdgbruuhlfbuednrjgjr-ture
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by arcfour on Monday March 23, 2026 @02:38PM (#47493430)
You know what's funny is that, at least by default, these strings have some information in them that tells you the serial number and model of the key, among other things.
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by HPsquared on Monday March 23, 2026 @12:53PM (#47492033)
It can be a little touchy.hunter2
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by MengerSponge on Monday March 23, 2026 @01:06PM (#47492213)
Why'd you just type a bunch of asterisks?
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by baby_souffle on Monday March 23, 2026 @02:18PM (#47493187)
You all have made me realize that bash.org is no longer around. Thanks for the trip down memory lane :)
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by dizhn on Monday March 23, 2026 @02:26PM (#47493296)
My pet peeves. One of the top 5 was fake. It had a typo in the server message.
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by MengerSponge on Wednesday March 25, 2026 @05:28PM (#47523516)
"Do not cite the deep magic to me, witch! I was there when it was written."

https://web.archive.org/web/20230620135556/http://bash.org/?...

[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by Groxx on Monday March 23, 2026 @12:35PM (#47491790)
gesundheit
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by klooney on Monday March 23, 2026 @12:56PM (#47492081)
Until the security team requires a password on the yubikey tap
[ Parent | on HN ]
Re:Study: 'Security Fatigue' May Weaken Digital Defenses by JasperNoboxdev on Monday March 23, 2026 @12:01PM (#47491319)
Curious, why remove Touch ID? Been moving everything into it seems like a really good mix of convenience + security (especially if the alternative is copying your key into AI :) )
[ Parent | on HN ]