Ask HN: Why do you have to touch a USB security key?

2 pointsby whyagealmost 3 years ago

Why do you have to touch a YubiKey and similar security keys? I get the "something you have" principle, but by the same token (pun intended) I can <i>have</i> something without touching it with my bare finger.

2 comments

phillipseamorealmost 3 years ago

It is so that a key attached to a compromised system can't be used remotely.

stop50almost 3 years ago

Its an check for the firmware to see if the user really requested it.