Hacker News new | ask | show | jobs
by Tharkun 3080 days ago
I lose things. Frequently. Key fobs have fallen off my key chain. Someone once snail mailed me a flash drive which I'd lost (and which contained a single scanned invoice). I don't like physical access tokens. House keys are kind of a necessary evil (and I'm paranoid of losing them). But that's as far as I'm willing to go. Everything else can just live in my head. Including the strong passphrases to various SSH keys, GPG keys and whatnot.

For anything I don't want to remember, I use pass.

2 comments

I've, fortunately, never lost my keys -- including my Yubikeys -- but I keep spares just in case I ever do.

When Yubico shipped me two new replacement Yubikeys (recent RNG issue), I just tossed them in the safe. I've also got a USB flash drive in there (in a tamper-evident bag) with a LUKS-encrypted filesystem that contains a backup of my GPG keys. I've got another such USB flash drive safely stored at another location too.

I leave my yubikey nano in my laptop at all times.

Security is that: (A) usage requires touch; (B) if my laptop is stolen I'll notice :)