Based on our behavior, it is good to reinforce this message, thanks. I do have a beef with how password managers implement Yubikey authentication. I bought one some time ago and and set it up with Lastpass, then was dismayed to see a link on the LastPass login that allowed me to bypass the Yubikey and have a code sent to my email instead. I called support and they said that option cannot be turned off. My financial website login pages also provided links to bypass the hardware key. Why have a more secure authentication method (Yubikey) when any bad actor can just bypass it and use a less secure method? I tossed my Yubikeys and now use a time base authenticator. I queried an AI chatbot and it confirmed that LastPass and Dashlane still allow bypass (though AI hallucinates a lot so take that with a grain of salt.)
I'm also an engineer and trying to say this respectfully. Driving a tank because it is safe is somewhat selfish. It implies that you want to crush the other people in an accident. For health and climate reasons, I chose to drive a high efficiency vehicle and walk and bike. We would all be safer if everyone did the same. The arms race to ever bigger tanks for safety does not make society safer. Maybe new car envy can be redirected to healthy lifestyle envy. Ever more sophisticated electronics translates into more expensive maintenance and shortened vehicle lifetimes. It takes the focus from why we own cars - for transportation.
Comments
Based on our behavior, it is good to reinforce this message, thanks. I do have a beef with how password managers implement Yubikey authentication. I bought one some time ago and and set it up with Lastpass, then was dismayed to see a link on the LastPass login that allowed me to bypass the Yubikey and have a code sent to my email instead. I called support and they said that option cannot be turned off. My financial website login pages also provided links to bypass the hardware key. Why have a more secure authentication method (Yubikey) when any bad actor can just bypass it and use a less secure method? I tossed my Yubikeys and now use a time base authenticator. I queried an AI chatbot and it confirmed that LastPass and Dashlane still allow bypass (though AI hallucinates a lot so take that with a grain of salt.)
Post: Beefing Up Security
Link to comment from November 15, 2025
100% agree. I worry about the world in which my daughter will live.
Post: What Worries You?
Link to comment from March 15, 2025
I'm also an engineer and trying to say this respectfully. Driving a tank because it is safe is somewhat selfish. It implies that you want to crush the other people in an accident. For health and climate reasons, I chose to drive a high efficiency vehicle and walk and bike. We would all be safer if everyone did the same. The arms race to ever bigger tanks for safety does not make society safer. Maybe new car envy can be redirected to healthy lifestyle envy. Ever more sophisticated electronics translates into more expensive maintenance and shortened vehicle lifetimes. It takes the focus from why we own cars - for transportation.
Post: Connor suffers from new car envy
Link to comment from August 3, 2024