(untitled)

Is it worth it to store passwords or key files for encrypted devices in these usb things? If so, is there a diy way to do this without paying 50 bucks for a company that probably phones home (yubikey)?

The original one just does HOTP (or TOTP with a helper program) plus a static password slot. Nothing much to it, if you want to be sure you could just do a packet capture and find out. You could accomplish the same thing with KeepassXC on a USB stick (does TOTP) or one of various fully open-sourced alternatives if you want to do the whole SecurID key fob experience w/e

>>22442 I see this constantly, there's this weird belief that all hardware or software that promotes security must be backdoored or compromised.

You're on an anonymous image board, of course people are gonna be schizo thinking everything that isn't GNU-ified is phoning home.

>>22446 its at least partially rooted in reality, see the recent news with the liberty safe company, which just publicly revealed that they have a backdoor and give it out when the fbi asks politely. Not to say nothing trustworthy exists, but to be worthy of trust requires more than benefit of the doubt, and unfortunately in many cases its pretty difficult to check absolutely.

>>22442 >probably phones home take your meds bro, its a hardware MFA token, not a GPS tracking device.

My main concern with this sort of security method is losing it or hardware failure and getting fuarrrked which ive heard happen to people before. Can you have multiple keys like this for the same thing to have backups?

>>23400 You can also lose your phone or your RSA SecurID fob or your .kdbx or Bitwarden vault where you stored your TOTP seeds. This is why it's vital to have several copies of static backup codes for each account that uses 2FA, stored in places that you can access using passwords that you know by heart, and without 2FA. They can be labelled in ways that let you know which set of codes goes to which account, but will be meaningless to others (and even if they figured it out, they still only have one factor).

>>23399 thats a usb stick connected to pc/laptop with internet access... >>22446 western laws demand backdoors in software for state access and china makes the hardware with backdoors for themself. Modern security is a swiss cheese. We had a thread here about how some usb sticks had hidden sectors where the firmware copied password looking files into so anything you thought deleted could be read by an agent later.

>> 23407 > We had a thread here about how some usb sticks had hidden sectors where the firmware copied password looking files into so anything you thought deleted could be read by an agent later. This one? >>20744

>>23408 thread i meant was over a year ago and is long gone. It was hardware hackers discovering some usb stick firmware having malicious code that would scan for important looking files and save them in hidden sectors no accessible to normal user. I believe it all starter with a defect controller they replaced to restore important files and noticing wait why is total storage space suddenly much bigger.

How to make a portable, encrypted file safe from a usbstick, suitable for a passwords file or anything else: https://www.linux.com/training-tutorials/weekend-project-make-portable-encrypted-file-safe/

>>22442 Use KeepassXC , there is a addon ( I don't use it) for browser and it encrypts the passwords file and it works win/linux without problems, future proof.