Bitcoin Forum
October 22, 2017, 07:42:36 PM *
News: Latest stable version of Bitcoin Core: 0.15.0.1  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Can I use my own Yubikey on Mt Gox?  (Read 916 times)
AmDD
Legendary
*
Offline Offline

Activity: 997



View Profile
October 12, 2012, 10:13:53 PM
 #1

I just bought a Yubikey from www.yubikey.com and tried to add it to my Mt Gox account but I cant seem to figure out how. It looks like they want you to buy a key from them... Am I missing something?

BTC tip jar: 18EKpbrcXxbpzAZv3T58ccGcVis7W7JR9w
LTC tip jar: Lgp8ERykAgx6Q8NdMqpi5vnVoUMD2hYn2a
1508701356
Hero Member
*
Offline Offline

Posts: 1508701356

View Profile Personal Message (Offline)

Ignore
1508701356
Reply with quote  #2

1508701356
Report to moderator
1508701356
Hero Member
*
Offline Offline

Posts: 1508701356

View Profile Personal Message (Offline)

Ignore
1508701356
Reply with quote  #2

1508701356
Report to moderator
1508701356
Hero Member
*
Offline Offline

Posts: 1508701356

View Profile Personal Message (Offline)

Ignore
1508701356
Reply with quote  #2

1508701356
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Inaba
Legendary
*
Offline Offline

Activity: 1260



View Profile WWW
October 12, 2012, 10:23:38 PM
 #2

Nope.

Nope you can't use it.
Nope you aren't missing anything.

If you're searching these lines for a point, you've probably missed it.  There was never anything there in the first place.
AmDD
Legendary
*
Offline Offline

Activity: 997



View Profile
October 12, 2012, 11:20:07 PM
 #3

Seriously? What a crock of shit!

BTC tip jar: 18EKpbrcXxbpzAZv3T58ccGcVis7W7JR9w
LTC tip jar: Lgp8ERykAgx6Q8NdMqpi5vnVoUMD2hYn2a
Carlton Banks
Legendary
*
Offline Offline

Activity: 1792



View Profile
October 13, 2012, 07:50:58 AM
 #4

Seriously? What a crock of shit!

I understand what you're saying, but not quite.

The Yubikey has an internal key that Gox needs to know before it can identify your Yubikey as being definitively yours (a cryptographic signature is generated using the internal key). And so, I'm afraid you got what you paid for (you just didn't know what you were paying for)

Does anyone know if OP could send the Yubikey to Gox, and Gox then extract a copy of the internal key? (sounds like a potentially dangerous thing to do. If Gox can scan the internal key, then I bet a postal worker that knows what the Mt Gox address looks like could equally extract the key).

Vires in numeris
AmDD
Legendary
*
Offline Offline

Activity: 997



View Profile
October 13, 2012, 12:44:04 PM
 #5

Seriously? What a crock of shit!

I understand what you're saying, but not quite.

The Yubikey has an internal key that Gox needs to know before it can identify your Yubikey as being definitively yours (a cryptographic signature is generated using the internal key). And so, I'm afraid you got what you paid for (you just didn't know what you were paying for)

Does anyone know if OP could send the Yubikey to Gox, and Gox then extract a copy of the internal key? (sounds like a potentially dangerous thing to do. If Gox can scan the internal key, then I bet a postal worker that knows what the Mt Gox address looks like could equally extract the key).

I understand what your saying but based on that there should be no place at all, other than www.yubikey.com, that they will work. And if that's the case, what's the point?

BTC tip jar: 18EKpbrcXxbpzAZv3T58ccGcVis7W7JR9w
LTC tip jar: Lgp8ERykAgx6Q8NdMqpi5vnVoUMD2hYn2a
Carlton Banks
Legendary
*
Offline Offline

Activity: 1792



View Profile
October 13, 2012, 01:31:52 PM
 #6

Perhaps the key is supplied in the instructions, or the instructions tell you how to access the key. If you can come up with a secure way of supplying the key to a third party, then you've got no problems using it with the services of said third party. Gox themselves sell Yubikeys directly to customers themselves, which should go a long way to making the key pretty secure.

Vires in numeris
Inaba
Legendary
*
Offline Offline

Activity: 1260



View Profile WWW
October 13, 2012, 01:54:13 PM
 #7

It's Mt.Gox themselves that is the crock of shit here, not Yubikey.  Gox decided to run their own AES256 server instead of using Yubikeys, so they have a unique signature that makes using their keys impossible elsewhere for the most part.  That said, given the history of the security practices at Mt.Gox, I would trust Yubikey far more to keep the Yubikey servers uncompromised than I would ever trust Mt.Gox to properly run an encryption server... but it is what it is.

If you're searching these lines for a point, you've probably missed it.  There was never anything there in the first place.
AmDD
Legendary
*
Offline Offline

Activity: 997



View Profile
October 13, 2012, 02:20:38 PM
 #8

It's Mt.Gox themselves that is the crock of shit here, not Yubikey.  Gox decided to run their own AES256 server instead of using Yubikeys, so they have a unique signature that makes using their keys impossible elsewhere for the most part.  That said, given the history of the security practices at Mt.Gox, I would trust Yubikey far more to keep the Yubikey servers uncompromised than I would ever trust Mt.Gox to properly run an encryption server... but it is what it is.


I agree, i wasnt upset with Yubikey but rather Gox for not being clear about having to buy one from them and for not using their servers.

BTC tip jar: 18EKpbrcXxbpzAZv3T58ccGcVis7W7JR9w
LTC tip jar: Lgp8ERykAgx6Q8NdMqpi5vnVoUMD2hYn2a
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!