Bitcoin Forum
December 03, 2016, 11:53:12 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Yubikey use across sites?  (Read 1101 times)
Piper67
Legendary
*
Offline Offline

Activity: 1008



View Profile
September 06, 2011, 02:43:50 PM
 #1

A question from deep within the recesses of my technical ignorance:

Is it possible for other sites (Tradehill, Flexcoin, Vibanko, etc) to implement user authorizations based on the Yubikey some of us are getting from Mt. Gox? Alternately, would it be possible to have a Yubikey-like solution that would work across many different sites?

Sorry if this is a stupid question.

Cheers, everyone.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480809192
Hero Member
*
Offline Offline

Posts: 1480809192

View Profile Personal Message (Offline)

Ignore
1480809192
Reply with quote  #2

1480809192
Report to moderator
Drifter
Sr. Member
****
Offline Offline

Activity: 367


View Profile
September 06, 2011, 04:18:03 PM
 #2

You can buy yubikeys that aren't attached to a specific service, but that can't be done with the Mt. Gox specific yubikeys.

w1R903
Full Member
***
Offline Offline

Activity: 218


View Profile
September 06, 2011, 04:29:59 PM
 #3

Depends on what version of Yubikey Mt. Gox is using.  The latest version can store two passwords.  Go to the Yubikey site, download the Yubikey manager software (available for Linux), and check to see how many slots you have available.  I was able to store a 32-character password on the second slot of the Yubikey I received for a specific vendor.  Just be careful not to overwrite the existing slot, or you may not be able to recover your Yubikey.

4096R/F5EA0017
Otoh
Donator
Legendary
*
Offline Offline

Activity: 1918



View Profile
September 06, 2011, 08:27:43 PM
 #4

I've a regular Yubikey (as well as a free Mt.Goxxed one) that I got with a Lasspass Pro package, seems it's an open one & any site that wishes to contract Yubikey's service & not order proprietary keys could easily add this double authorisation to their sites, then if you have a Yubikey you just get the site to recognise it (2 seconds) & that's it - wish my banks would do this (will ask them) & Gmail too (even though they have phone DA) because I like the physical key & change phones (sim cards/numbers) when I travel

Node40.com is a leader in DASH hosting, dedicated exclusively to fully managed masternode hosting. Professional, organized, and responsive. I have many dozens of nodes with them.    
BTC = $c²     BTC = 1otohotohMoQoxHuxLBveQiZcV3Pji3Tc      DASH, Digital Cash = www.dash.org   
   CHARITY | MY REP | DICE
elggawf
Sr. Member
****
Offline Offline

Activity: 308



View Profile
September 06, 2011, 08:43:07 PM
 #5

Depends on what version of Yubikey Mt. Gox is using.  The latest version can store two passwords.  Go to the Yubikey site, download the Yubikey manager software (available for Linux), and check to see how many slots you have available.  I was able to store a 32-character password on the second slot of the Yubikey I received for a specific vendor.  Just be careful not to overwrite the existing slot, or you may not be able to recover your Yubikey.

MtGox use both slots.

You can reset your Yubikey to use whatever you like, however doing so will break MtGox logins until you update the key that's stored on their end - and I don't think they've any motivation to do that whatsoever (particularly if you got the yubikey for free).

^_^
w1R903
Full Member
***
Offline Offline

Activity: 218


View Profile
September 06, 2011, 09:29:24 PM
 #6

Mt. Gox must have the single-slot Yubikey, because I don't see how it would be possible to use both slots for a single authentication.  That's too bad, since many services offer the dual slot version of Yubikey, which gives users an extra slot to use for their own purposes.

4096R/F5EA0017
Raize
Donator
Legendary
*
Offline Offline

Activity: 1374


View Profile
September 06, 2011, 09:50:25 PM
 #7

I touch once to login and touch and hold for 3 seconds to withdraw on my MtGox-issued Yubikey.

OrganofCorti's Neighbourhood Pool Watch - The most informative website on blockchain health
MagicalTux
VIP
Hero Member
*
Offline Offline

Activity: 617


Working on new MtGox features


View Profile WWW
September 06, 2011, 10:10:13 PM
 #8

We prevent use of the yubikey on other sites to limit (slightly) risks of phishing. Making it normal to enter your yubikey code on other sites might be a risk, and considering recent phishing attempts I wouldn't be surprised we start seeing phishing attempts targetting yubikeys.

elggawf
Sr. Member
****
Offline Offline

Activity: 308



View Profile
September 07, 2011, 01:50:46 AM
 #9

Mt. Gox must have the single-slot Yubikey, because I don't see how it would be possible to use both slots for a single authentication.  That's too bad, since many services offer the dual slot version of Yubikey, which gives users an extra slot to use for their own purposes.

As Raize said, they use both slots - one for logging into the site, and one for authenticating withdrawals.

^_^
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!