← Back to context

Comment by jwr

4 hours ago

I have been using Yubikeys for years, according to this guide: https://github.com/drduh/yubikey-guide

The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter) can't do things unless I confirm.

if $5.6B is protected by your index finger then you're gonna need kidnap insurance, and a really good pair of gloves.

  • The point is the attacker has to be near you and mot somewhere around the globe

  • It's not protected by the index finger at all. There is no fingerprint reader in a Yubikey. The only protection is that it requires physical access and can't be triggered from software.

    • If you're not buying the biometric ones, sure. Now you don't even need the gloves. Maybe kneecap armor instead.