top | item 29565122

(no title)

tbabej | 4 years ago

For the Yubikey owners out there, a while back I wrote a blog post on how to achieve a similar setup using a Yubikey [1]. All it requires is a lanyard to attach the yubikey to.

[1]: https://tbabej.com/Yubikey-secure-session-setup/

discuss

order

captaincrunch|4 years ago

Anyone needing a Yubikey would be very lucky to see them just hanging out of a computer, would just a bonus for the evil actor to also ruin your day and pull it out.

tbabej|4 years ago

The way I've implemented this is that the yubikey is on an extensible lanyard which is almost always around my neck. So while an evil actor could definitely unplug it to ruin my day, stealing it would be a tad bit more difficult :)

In any case, the primary idea here was not to prevent stealing the laptop, but to prevent walking away from the laptop without locking it.

dane-pgp|4 years ago

Or you could attach the Yubikey to your belt (with a clip) and connect it to the laptop with a USB cable. Then all they could steal is a useless laptop and a cheap cable.

jiehong|4 years ago

Once you’ve lost your yubikey, you have to reboot as root then?

Is it possible to register 2 keys, so that any of them is correctly recognised?

r-w|4 years ago

Won’t do much against my $5 pair of scissors!