If I don’t trust the computer with my PIN, I don’t trust it to handle an access token.
this post was submitted on 31 Jul 2026
8 points (100.0% liked)
Applied Paranoia
67 readers
8 users here now
Discussions of Paranoia, how to apply it in a digital ecosystem (Security, Privacy, Tools, Applications, Questions)
Rules
- Be nice
- Stay on topic
- Don’t farm rage
- Be respectful of others
founded 1 year ago
MODERATORS
the trouble is many tokens the PIN overrides the fingerprint, so giving the pin to a host reduces it from something you have/something you are to just something you have, something you know. And computers are good at knowing things.
i would like to try out the yubikey bio enterprise, but they wont sell it to low volume operations like mine