If you use Gmail: Get. A. Security. Key. Yubikey brand is $17.99 on Amazon.https://twitter.com/jonathanstray/status/824328804646711296 …
-
-
Replying to @zeynep
zeynep tufekci Retweeted
Buy this. https://www.amazon.com/Yubico-Y-123-FIDO-U2F-Security/dp/B00NLKA0D8 … Follow these instructions. https://support.google.com/accounts/answer/6103534?hl=en&ref_topic=6103521 … Disable SMS 2FA. Five minutes. https://twitter.com/vonSpawn/status/824329597252751366 …
zeynep tufekci added,
This Tweet is unavailable.5 replies 26 retweets 69 likes -
people need to make sure they are not using OTP mode with yubikeys:https://medium.com/@ssg/avoid-leaking-your-identity-with-yubikey-92539b6608a …
1 reply 0 retweets 2 likes -
clarification: yubikey OTP needs to be disabled to protect accidental leaks of identity.
1 reply 0 retweets 2 likes -
the one I'm recommending, cheapest one, has no OTP.
1 reply 0 retweets 1 like -
good to know! all my yubikeys (nano, 4) had otp. let me update the article.
1 reply 0 retweets 0 likes
I always recommend the U2F only option; too much complexity=more insecurity but WTF to your article! Serial no?!!
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.