sig-io

And any accidental button-press while in a chat-app or website will leak your password. I've seen many yubikey otp's accidentally pasted into irc, if you set it to password, you just posted that. I'd never recommend using that mode.

Yes, but this doesn't lock people out of decrypting old copies, it's git, they can rolllback to before their key was removed, and decrypt every old secret they had access tobwhich hasn't been rotated yet. The key-rotation on every employee-change is the hard part.

Because his puzzle-games collection are computer games you can play yourself, they can be found here: https://www.chiark.greenend.org.uk/~sgtatham/puzzles/ Or in the appstore/playstore.

My current timewaster is 'patterns',a nonogram puzzle