

3·
21 hours agoYeah, unsalted MD5 has been crackable easily for at least 20 years now. 🤣


Yeah, unsalted MD5 has been crackable easily for at least 20 years now. 🤣


I would not trust it as a single factor, but 2FA should always be something you have+something you know, biometeics is more of a “something you ARE”, which is unchangeable.


Yubikeys are still not biometric unless you’re buying the super-super expensive one. They are just very secure MFA. (in that it’s extremely hard to read the secrets from them even with physical access)


If you push a ton of key at same time, all work?!
That is but one method of Yubikey. They also support cryptographic passkeys and can store TOTP secrets as well as PGP crypto keys.
The “touch key random key” is a OTP code that can be used for legacy software, Passkey and/or other functions are more valuable to me. Can read more about OTP security here.