Comment by jwr

3 hours ago

I have been using Yubikeys for years, according to this guide: https://github.com/drduh/yubikey-guide

The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter) can't do things unless I confirm.

if $5.6B is protected by your index finger then you're gonna need kidnap insurance, and a really good pair of gloves.

  • It's not protected by the index finger at all. There is no fingerprint reader in a Yubikey. The only protection is that it requires physical access and can't be triggered from software.

    • If you're not buying the biometric ones, sure. Now you don't even need the gloves. Maybe kneecap armor instead.