Hacker News new | ask | show | jobs
by beezle 3079 days ago
Yubikey is a step in the right direction, but afaik it is still vulnerable at the pin entry level unlike a dedicated smartcard wtih pinpad reader. Likewise, gpg-agent, if I understand/remember it correctly, is also subject to attacks that would not be possible with the dedicated reader+card combo.