in 
, 
, 
& queer, 
Followup SSH sessions don't require the PIN, but do require physical press of the key button. I missed gnubby at Google, so I constructed my own method of one-touch gnubby or numerical 2fa with memory-stored SSH keys :)
Show this thread
Fun 2fa hardening work I did recently: $ ssh lizf@test Enter passphrase for key '[snip]': One-time password (OATH) for `lizf': Welcome to Ubuntu 18.04.1 LTS... $ ssh lizf@test [agent 'gsc'] Enter PIN to unlock key 3087B018 on 'Yubico YubiKey': Welcome to Ubuntu 18.04.1 LTS...
-
-
- End of conversation
New conversation -
-
-
Does they rely on ForceCommand?
-
Nope! Just PAM modules :)
- Show replies
New conversation -
-
-
Oooh, nice. Can you point to a good writeup?
-
Gist coming soon.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.