| ▲ | baby_souffle 2 days ago | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
> And no one in the security business seems to consider the overall burden of yet another step. Each of which is simple in by itself, but cumulatively they are a giant hassle, and so people look for workarounds. This is a tale as old as time. At a prior gig, IT took away touch ID for ... $reasons. ~40% of the engineering team was already big into mechanical keyboards so it only took one person to "just FYI, VIA allows you to program macros". Is it _as bad_ as password on a sticky note? Not quite but I can't imagine that touch ID was _more_ of a threat. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ▲ | sam_lowry_ 2 days ago | parent | next [-] | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
A big use case for Yubikeys is the ability to emulate a keyboard and produce a string of chars on touch. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ▲ | JasperNoboxdev 2 days ago | parent | prev [-] | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Curious, why remove Touch ID? Been moving everything into it seems like a really good mix of convenience + security (especially if the alternative is copying your key into AI :) ) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||