[ale] Deal on yubikey HW for 2FA

[James Sumners]

Yeah, it confounds me why they didn't just use the open TOTP protocol.
Google Authenticator isn't hard to use. And there are others if you don't
want to use Google's.

On Sunday, October 4, 2015, Jeremy T. Bouse <Jeremy.Bouse at undergrid.net>
wrote:

> I've got an older Yubikey VIP that I believe the only thing I use it for
> is PayPal. For everything else I have my 2FA handled by using either Google
> Authenticator or Duo Security and I could honestly just move that down to
> Duo as it can handle both for me. Cost is nothing more than the
> smartphone/tablet I already own and always have handy nearby. If I site I
> use supports 2FA it's enabled immediately and used along with the long
> randomly generated password. Almost all of my servers with any outside
> public access require Duo 2FA to login and pretty much use SSH identity
> keys over v2 protocol to gain access.
>
> On 2015-10-04 01:14, DJ-Pfulio wrote:
>
>> Hope that nobody minds this ...
>>
>> Github and Yubico are pushing 2-Factor Authentication by making it VERY
>> cheap.  $5 for a device + shipping and handling.  Limit 2; having 2 is a
>> "best practice" to avoid issue if you loose one when traveling.
>>
>> The offer:
>> https://www.yubico.com/github-special-offer/github-yubikey-special-offer/
>>
>> -------
>> I ordered 2 - total cost was $15 including shipping.
>>
>> An unvalidated list of websites claiming support for the U2F protocol:
>>   http://www.dongleauth.info/
>>
>> Only downside that I know is Google Chrome or Chromium browsers are
>> required. Doesn't work with Firefox. There appears to be some udev setup
>> required as well.
>>
>> Anyway - cheap protection against phishing  and replay attacks for some
>> online websites.
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://mail.ale.org/mailman/listinfo/ale
>> See JOBS, ANNOUNCE and SCHOOLS lists at
>> http://mail.ale.org/mailman/listinfo
>>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>


-- 
James Sumners
http://james.sumners.info/ (technical profile)
http://jrfom.com/ (personal site)
http://haplo.bandcamp.com/ (band page)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20151004/d7f1962c/attachment.html>