Hacker News Reader

Comment by Alex3917 | Hacker News Reader

Every time my leg accidentally hits by YubiKey, everyone on Slack thinks I'm having a stroke. I already set it to require a long press so that it takes a couple seconds, but that doesn't help if my laptop is just at the wrong angle. Anyone else come up with a good solution to this issue?

View on HN

1) Use U2F, rather than OTP 2) Do you have a Nano? I've personally only ever had this issue with yubikey nanos, not the normal ones - and when you're not intending to authenticate, you can remove your keychain that has your yubikey from the computer!

I turn my OTP off, just use U2F:

> ykman mode FIDO

Oh nice, just did that, thanks! I wasn't even using the OTP to begin with, but I didn't realize I could just disable it.

I just don't have it plugged in unless I need it. Admittedly I only use it for mail and password manager.

What do you do that requires you to authenticate that frequently? Could the authentication state not be cached for a while?

Keeping it plugged in also increases the chances you'll forget it there when you go to the bathroom. The NFC version of the keys is the best solution to this, imo. You can keep the key attached to your body and not worry about ripping it out when you walk away

Try this: https://support.yubico.com/support/solutions/articles/150000...

Already did that. It doesn't do anything if the side of the laptop is pushing into my leg or the side of the couch or something, which is where it usually happens.

You accidentally send one-time passwords to other people? Good job that's not the only factor.

Reply on news.ycombinator.com