Reply to thread

Message

<blockquote data-quote="Orchid" data-source="post: 1025069" data-attributes="member: 98800">[USER=96829]@piquiteco[/USER], I never really heard about YubiKey until recently and didn&#039;t know what it was until researching it yesterday. Thank you for mentioning it to me.[USER=3]@Ink[/USER], I use Netflix consistently, and Netflix doesn&#039;t have any account security, as far as I&#039;m aware. Netflix has a Profile Lock where you have to enter a PIN to access your profile, and there is an option to enter your phone number, but I don&#039;t know if Netflix would use that as a form of authentication. I will do some research and get back to you on that.[USER=57429]@Zero Knowledge[/USER], Maybe/Maybe not. YubiKey does have vulnerabilities too. The YubiKey validation server is cloud-based. If a hacker can get to the server, it might be game over, and you have to trust the company won&#039;t do any suspicious activity. From my research (so far), FIDO2/WebAuth is the most secure way to secure a passwordless account.References<a href="https://privsec.dev/posts/knowledge/multi-factor-authentication/" target="_blank">PrivSec - Multi-Factor Authentication</a><a href="https://developers.yubico.com/OTP/OTPs_Explained.html" target="_blank">YubiCo OTP</a></blockquote>

[QUOTE="Orchid, post: 1025069, member: 98800"] [USER=96829]@piquiteco[/USER], I never really heard about YubiKey until recently and didn't know what it was until researching it yesterday. Thank you for mentioning it to me. [USER=3]@Ink[/USER], I use Netflix consistently, and Netflix doesn't have any account security, as far as I'm aware. Netflix has a Profile Lock where you have to enter a PIN to access your profile, and there is an option to enter your phone number, but I don't know if Netflix would use that as a form of authentication. I will do some research and get back to you on that. [USER=57429]@Zero Knowledge[/USER], Maybe/Maybe not. YubiKey does have vulnerabilities too. The YubiKey validation server is cloud-based. If a hacker can get to the server, it might be game over, and you have to trust the company won't do any suspicious activity. From my research (so far), FIDO2/WebAuth is the most secure way to secure a passwordless account. [B]References[/B] [URL='https://privsec.dev/posts/knowledge/multi-factor-authentication/']PrivSec - Multi-Factor Authentication[/URL] [URL='https://developers.yubico.com/OTP/OTPs_Explained.html']YubiCo OTP[/URL] [/QUOTE]

Verification