Interesting. I haven’t had this problem, because every time I need to touch the yubikey macOS pops a giant fucking dialog that requires 2-3 clicks before it lets me tap it.
Shouldn't you only touch your YubiKey when you've just done something that you know requires you to touch your YubiKey? Otherwise, you're just authenticating anything that asks, including the virus.
Interesting project, but I can't say I've ever wondered whether or not it's time to touch my Yubikey. Authenticating with a token is a very intentful process.
For Linux, see: <a href="https://github.com/maximbaz/yubikey-touch-detector">https://github.com/maximbaz/yubikey-touch-detector</a>
I'm looking at the source code but not seeing any notification popups etc. Where's the notification mechanism beyond writing to stdout? Am I misunderstanding the project's use case?
Awesome! I had a look at making something similar but stumbled into issues with looking at file updates with fnotify as it isn't supported on OSX. This is the answer to my prayers! Will definitely add some notification to use this so I get a visual/auditory signal to touch my Yubikey.<p>Thank you so much for making this
I only wanted to say I appreciate the F-clef in your shell prompt:<p><pre><code> 𝄢 yknotify
{"ts":"2025-02-12T20:09:03Z","type":"FIDO2"}
{"ts":"2025-02-12T20:09:14Z","type":"OpenPGP"}</code></pre>
sweet, I can't wait to download something that will scan my system's logs looking for specific security signals, and then take action when it sees certain ones!<p>/s<p>Joking aside, as others have said. I've never been shocked to learn something was waiting for my touch because it's always a thing I've initiated and am usually saying "cmon cmon" while waiting for the key to become ready _for_ me to touch it.<p>If you want to write a program that notifies my yubikey that a human is waiting for it to light up so they can touch it, then we'll be talking :)