I don't think this product is as useful as it seems at first glance. Using stronger passwords is probably just as safe.
But I am no tptacek so I may be completely wrong :)
I don't think this product is as useful as it seems at first glance. Using stronger passwords is probably just as safe.
But I am no tptacek so I may be completely wrong :)
I do hope you realize this raises the amount of work the attacker has to do to actually get access to your device. It's a little like saying a second lock on your door is not going to stop anyone, but in practice statistics are clear: adding one more layer, even if that layer can be defeated as well, reduces the chance of a successful attack, or deters the attacker in the first place.
Anyway, Yubikey is only a second factor - not your entire security strategy - and I think it is made a bit stronger with a biometric, thats all.
The people most of us work with have physical access to our computers and they could probably shoulder surf a short password (use a password manager!). I don't imagine any of them could successfully lift a fingerprint sufficiently well to fool a biometric reader. It's looks easy in perfect conditions on YouTube but in the real world it's a bit harder.
I hope not anyway because my office has fingerprint access.