Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #275759

Re: a passwordless operating system

From 🦓 <czyborra@gmail.com>
Newsgroups linux.debian.user
Subject Re: a passwordless operating system
Date 2024-12-16 09:10 +0100
Message-ID <JUekV-huGF-3@gated-at.bofh.it> (permalink)
References <JTRHH-h9O8-5@gated-at.bofh.it> <JTXWN-hdGo-3@gated-at.bofh.it> <JUe1z-hujU-1@gated-at.bofh.it> <JUe1z-hujU-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

You donot understand your own mistrust.  You are trying to make it
unnecessarily difficult to use your tool.  How would you like a spoon that
phishing-resistently refuses to spoonfeed you unless you have sufficiently
identified yourself as an authority-authorized credit card owner?

Op ma 16 dec 2024 om 08:49 schreef Jeffrey Walton <noloader@gmail.com>:

> On Mon, Dec 16, 2024 at 2:42 AM 🦓 <czyborra@gmail.com> wrote:
> >
> > YubiKeys is a password manager in a dongle, thus the exact opposite of
> passwordless.  Your dogs and your goats are passwordless, they reliably
> serve you but have a built in immune system with redundancies protecting
> them from abuses of their passwordlessness.
>
> You don't understand YubiKeys, their capabilities, and Universal
> Second Factor. The security requirements of U2F are a token that has:
>
>     1. high entropy
>     2. replay resistant
>     3. phishing resistant
>
> Passwords may satisfy (1), but they completely fail at (2) and (3).
>
> And your original problem statement stated memorization was the
> problem you were trying to solve. Even if a YubiKey serves up a fixed
> password (which it does not), then it solves your memorization
> problem.
>
> I have no idea what dogs and goats have to do with things.
>
> Jeff
>
> > Op zo 15 dec 2024 om 15:35 schreef Jeffrey Walton <noloader@gmail.com>:
> >>
> >> On Sun, Dec 15, 2024 at 6:47 AM 🦓 <czyborra@gmail.com> wrote:
> >> >
> >> > my mother is currently struggling to memorize all of my dead
> stepfather's identities and passwords and that makes me wonder how would
> you like an internet of hosts who store everything undeletably and
> barrierlessly readably with no secrets whatsoever to humanity nor any other
> natural or artificial or divine intelligence?   i know this sounds like a
> question for debian-devel or debian-policy but i m dumping it onto
> debian-user as as of now i m not subscribed to any other.
> >>
> >> For some of the larger sites you can use a YubiKey. YubiKeys use the
> >> FIDO/FIDO2 protocols. I believe WebAuthn also supports YubiKeys.
> >>
> >> But I found a lot of sites do not support FIDO/FIDO2 protocols. For
> >> example, most banks and my mother's credit union do not support them.
> >> In this case, I send a letter to the company's legal department and
> >> put them on notice. (I also point out the problems with their current
> >> authentication system).
> >>
> >> If you start switching to YubiKeys, then be sure to use two of them.
> >> The second is a backup YubiKey, and it also gets enrolled when you
> >> convert the account. The backup YubiKey is used in case the first
> >> YubiKey is lost.
>


-- 
+491601449986@linktr.ee/czyborra🦓

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 09:00 +0100
  Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-15 14:50 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 15:30 +0100
    Re: a passwordless operating system songbird <songbird@anthive.com> - 2024-12-17 05:00 +0100
      Re: a passwordless operating system John Hasler <john@sugarbit.com> - 2024-12-17 05:30 +0100
        Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 06:50 +0100
          Re: Writing passwords down [was: a passwordless operating system] "Loris Bennett" <loris.bennett@fu-berlin.de> - 2024-12-17 08:30 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 08:50 +0100
            Re: Writing passwords down [was: a passwordless operating system] Mike Castle <dalgoda+debian@gmail.com> - 2024-12-17 18:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 15:30 +0100
          Re: Writing passwords down [was: a passwordless operating system] Lee <ler762@gmail.com> - 2024-12-17 15:40 +0100
            Re: libreoffice/openoffice system theme <tomas@tuxteam.de> - 2024-12-17 16:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Michael Stone <mstone@debian.org> - 2024-12-17 17:10 +0100
            Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-17 18:40 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:40 +0100
                Re: Writing passwords down [was: a passwordless operating system] tomas@tuxteam.de - 2024-12-17 19:30 +0100
                Re: Writing passwords down [was: a passwordless operating system] Nicholas Geovanis <nickgeovanis@gmail.com> - 2024-12-17 21:10 +0100
          Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-17 18:50 +0100
            Re: Writing passwords down Peter Hillier-Brook <phb@hbsys.plus.com> - 2024-12-17 20:20 +0100
              Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:50 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-18 06:00 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 11:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 19:00 +0100
                Re: Writing passwords down "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-18 19:10 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 20:10 +0100
                Re: Writing passwords down pocket@homemail.com - 2024-12-18 21:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 19:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-19 06:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 23:10 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-19 02:30 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:40 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-19 10:20 +0100
                Re: Writing passwords down Joe <joe@jretrading.com> - 2024-12-19 12:20 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-20 04:30 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-20 05:40 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-20 05:40 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-20 06:10 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:50 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-21 01:40 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-21 04:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:30 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 10:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 19:00 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-18 19:20 +0100
                Re: Writing passwords down Frank Jezzer <etphonehomefrance@gmail.com> - 2024-12-22 17:30 +0100
              Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-17 23:30 +0100
            Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:30 +0100
            Re: Writing passwords down debian-user@howorth.org.uk - 2024-12-17 21:50 +0100
              Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
      Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-17 12:10 +0100
  Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-15 15:40 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 08:50 +0100
      Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 08:50 +0100
        Re: a passwordless operating system Andy Smith <andy@strugglers.net> - 2024-12-16 09:00 +0100
          Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
        Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
          Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 09:10 +0100
      Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:20 +0100

csiph-web