Another great question: is there any difference between Yubikey and an app like authenticator. *YES*, the key verifies the real browser URL
-
-
Replying to @Pinboard
so if an attacker puts up an impostor website, the key won’t provide credentials that they can use to get your real mail. App will
1 reply 3 retweets 12 likes -
Replying to @Pinboard
Thanks so much for this. That’s something that I never understood before.
1 reply 0 retweets 0 likes -
Replying to @shawin
you’re welcome! I had to spend weeks bugging security nerds to figure any of this out; happy to spread the news
1 reply 0 retweets 1 like -
Replying to @Pinboard
You did great expressing what you learnt in non-nerd language. Hopefully that info gets shared far beyond twitter.
1 reply 0 retweets 0 likes
Replying to @shawin
thank you! I’m glad it was helpful
11:02 AM - 31 Jul 2017
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.