djasonpenney

I don’t get it.

Regional accents make this joke unfunny: /pawl/ versus /pohl/

…with big bills!

So tired of this old joke 🤢

What do you calls blonde sitting between two brunettes? Confused.

What? Alabama? Naw, you meant New Jersey!

Actually, with FIDO2, you _don’t_ have to have all the keys at the same place and at the same time. You can register one key and then come back later and register the second. As an example, I am registered in Google Advanced Protection, and I have _three_ Yubikeys. One is on my keychain, one is in my house, and a third is stored offsite. If I needed to add my Yubikey to https://toothpicks-r-us.com, I would register the first two keys and then add a TO-DO item to register the third key, but collect the recovery asset (usually a set of one-time passwords) in the meantime. The offsite location has my periodic [full backup](https://github.com/djasonpenney/bitwarden_reddit/blob/main/backups.md). The next time I refresh the backup, I trade out the offsite Yubikey with the one that was in my house. Back home, I register the third key and then store it in my home. Note that TOTP is a different and much harder problem. In addition to storing the recovery asset, as you would with FIDO2, you have an interim problem of what to do with the TOTP key (the shared secret between you and the website). You _could_ just store the key on a piece of paper or something, but IMO that vitiates one of the strengths of the Yubikey. The Yubikey is set up so that it’s difficult for an attacker to copy secrets off of it. For this and other reasons I no longer use my Yubikey 5 for managing TOTP keys. The workflow to add TOTP secrets is just too hard. I use a software TOTP app (like [Ente Auth](https://ente.io/auth/) for those.

If 2000 was the first year of the millennium, we just started the 26th year.

Huh? Oh, you meant to say NEW JERSEY!

I understand the dilemma of responsible reporting. This article is annoying as hell because the developers are still working on the mitigation, so no details are available. Sigh.

I have to floss my cat’s teeth.

Odor in the court?

Defendant -> respondent.

I don’t see your angle in it.

ZZ