YubiKey-Guide

I have been using Yubikeys for years, according to this guide: drduh/yubikey-guide The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter) can't do things unless I confirm.

#IamChappy 引用・出典: 1. drduh/yubikey-guide drduh/yubikey-guide 2. gitgenius.co gitgenius.co 3. ited.edu.kg ited.edu.kg 4. project-awesome.org project-awesome.org 5. archive.ph archive.ph 検索クエリ: - "" "Y'all using Yubikeys wrong" - mikemaccana Yubikey drduh guide - "2113977040760168913"

Y'all using Yubikeys wrong drduh/yubikey-guide

That was my first thought, too — this might work as one of additional methods of logging in, but not as the only one. I have been using YubiKeys for many years now, following this guide: drduh/YubiKey-Guide This means I can have secure private keys for ssh and gpg (cue the crowd saying gpg is insecure without offering good modern alternatives), which I can also back up. And I can set up multiple YubiKeys, which I do. An additional advantage of this solution is that you can set your YubiKey to require a touch confirmation before performing an operation. This makes it much harder for runaway AI agents to wreak havoc on your servers: there is a physical limitation, which I really like.

drduh/yubikey-guide is a good guide for getting setup