User's banner
Avatar

fireshell

fireshell@lemmy.ml
Joined
1 posts • 21 comments

XMPP/Jabber: fireshell[at]linux[dot]monster

OTR fingerprints: C47CFCDC D9F67D17 4C08AA1A C2500250 AB361153

Matrix/Element: [at]fireshell:matrix[dot]hostux[dot]net

IRC: fireshell on Libera Chat

OTR fingerprints: 1A66175C 7E713B1E 6D15079 87FB1952 C6866E05

Direct message

He wanted Uncle Vova to hide him from the bad guys, but he sent him away, there was no meeting. Pasha went to a foreign land.

permalink
report
parent
reply

org-mode/org-roam-ui in Emacs with PGP support synchronization via git in forgejo

permalink
report
reply

I was too lazy to just google it, but he has citizenship in Russia, the UAE, France, and Saint Kitts and Nevis.

permalink
report
parent
reply

Verifying the Security Claim of 2FA Devices

The claim that using OTP tokens and Yubikeys compromises your security and privacy is completely false.

Let’s look at this in more detail.

Arguments against concerns:

  1. Limited information:
  • Device serial numbers and purchase details are stored by the retailer, but this does not provide access to your accounts. Serial numbers themselves cannot be used for hacking.
  1. Cryptographic protection:
  • Yubikey and OTP tokens use strong cryptographic methods such as HMAC-SHA1, RSA and ECC, which make OTP generation extremely secure and tamper-resistant.
  1. Physical access:
  • Authentication using these devices requires physical access to the device. This means that an attacker must physically possess your Yubikey or OTP token in order to be authenticated.
  1. No transfer of personal data:
  • These devices do not transmit or store personal user information on third-party servers. They generate one-time codes locally and send them only to the target service.
  1. Phishing protection:
  • Yubikey with FIDO U2F and FIDO2 support protects against phishing because the codes are domain specific and cannot be used on phishing sites.

Additional arguments:

  1. Reducing dependency on passwords:
  • Using 2FA devices reduces the risk of accounts being compromised, even if the primary password is stolen.
  1. Integrated protection systems:
  • When combined with other security measures, such as two-factor authentication with SMS or mobile apps, OTP tokens and Yubikeys create multi-layered protection that makes it harder to hack.
  1. Convenience and speed:
  • These devices simplify the login process by providing instant and secure authentication without the need to remember complex passwords.

Conclusion:

While purchasing a 2FA device may leave traces in merchants’ databases, the risks are minimal compared to the security they provide. Yubikey and OTP tokens significantly increase the level of security for your accounts, especially when combined with other security methods. Therefore, the claim that using these devices compromises your security and privacy is untrue.

permalink
report
reply

Eidos – Offline alternative to Notion

permalink
report
reply

Is there anything there besides a video about Linux with 5 views? Maybe some unique blogs? Or at least reposts of channels from YouTube? Maybe collections of music videos?

permalink
report
reply

openSUSE is already a brand, now the main thing is not to get lost.

permalink
report
reply

“If you can’t win, lead.” Systemd development is in the hands of Microsoft employees. systemd has taken over almost all of Linux. Experts answer - in whose hands is Linux now? :)

permalink
report
reply

Durov, as a citizen of France, recently sent them away when they asked for access, and then flew to them to test the strength of democracy. Imbecility and courage.

permalink
report
reply

It’s always great that there is an alternative, although I use LibreOffice myself.

permalink
report
reply