hobune Channels Contact About Donate

Beat the Hackers! How to use a YubiKey to secure your accounts with 2fa!

Back to video page | Download comments jsonl

Comments (archived 2022-07-05 09:33; 20 top, 64 total comments)

Fikar 2020-08-20 23:34:32

imagine losing the key

51 likes
Replies (2)
Aidan Wilcox 2020-09-16 17:34:31

A. Alfikar taurisyah Thats why I keep mine always framed on my wall when Im not using it

1 like
カイル 2020-09-28 02:41:28

Aidan Wilcox

So a robber can access your data easily

0 likes
Rifqi L 2020-08-12 04:26:32

this guy explaining like a flash (DC Comic)

26 likes
ctaetcsh 2020-08-22 02:19:36

Heads up: it’s not recommended to use SMS 2 factor as there have been examples of simjacking where somebody can steal your phone number by pretending to be you and reporting your phone as stolen. Use an authentication app instead.

1 like
Replies (3)
Adam Wójcik 2020-08-24 17:44:01

Thanks for sharing. I already knew that, but I think many didn't. Also isn't it called "simswapping", not "simjacking"?

0 likes
Profgamer 2020-08-24 20:45:11

I have a question, they will report the phone stolen to who exactly?
If they are going to report to an cellphone network service provider then it wont work where I live because phone numbers are tied to the owner's I.D Card number and name which both have to be provided to do anything to a phone number.

0 likes
ctaetcsh 2020-09-10 04:54:01 (edited 2020-09-10 04:54:47 )

Adam Wójcik sim jacking is calling the carrier of the owner and impersonating them to report the device stolen and to get a new SIM card issued with the same phone number

0 likes
Ketan Choudhury 2020-08-14 19:59:41

How will you login into a mobile device if u use this key???

25 likes
Replies (14)
Filip 2020-08-17 15:18:27

Nfc

3 likes
Ketan Choudhury 2020-08-17 15:21:58

@Filip well all the smartphones doesnt have nfc...

0 likes
Hanif Faris 2020-08-18 07:16:11

@Filip very smart answer, thanks, Filip, very cool.

2 likes
SanstSapue 2020-08-18 15:59:58

I think you need to use an Otg

2 likes
Ketan Choudhury 2020-08-18 16:49:55

@SanstSapue yeah.. Probably , dont know whether that key will support mobile device but that might work

2 likes
カイル 2020-08-19 01:58:54

U can still use text or an authentication app

2 likes
Stun X Playz 2020-08-23 21:14:29

I use a adapter

1 like
Ketan Choudhury 2020-08-23 21:30:53

@Stun X Playz this works with mobile devices???

0 likes
Adam Wójcik 2020-08-24 17:42:42

@カイル Text is bad, because someome can simswap you. Auth apps are better, someone needs direct access to your phone.

1 like
LEVANTATE Y ORA 2020-08-30 12:31:40

@Filip most of does keys also have Bluetooth

0 likes
カイル 2020-09-07 00:25:00

Adam Wójcik true but the sim matches with the device if swapped you’ll need to call your cell provider to activate the sim card witch is normally matched with your phone serial number

0 likes
カイル 2020-09-07 00:26:15

Adam Wójcik its easier to hack into an authentication app than to swap cards

0 likes
カイル 2020-09-07 00:27:04

Adam Wójcik unless you have physical access to the phone

0 likes
tlesta666 2020-09-16 15:30:38

Nfc

0 likes
PARA 2020-08-22 23:50:56 (edited 2020-08-22 23:51:17 )

Fun fact the laptop is a Thinkpad t450s or something like it

0 likes
Rashed Ahmed 2020-08-27 17:47:08

So there’s no one sitting in the middle listening to my requests? 😒

1 like
Abhiram Nair 2020-08-30 08:38:55

You are like the default cube.

0 likes
Steven Wang 2020-08-29 02:24:50

this demo is better done than any of the actual makers of the keys. Just show an actual person using it instead of dumb cartoons.

0 likes
Odsku 2020-08-16 16:53:36

Does this protect me from session hijacking?

5 likes
Replies (8)
Bjorn Nuël 2020-08-20 07:37:07

No it doesn't. Only ssl and a vpn do that.

0 likes
Wolfie 2020-08-22 00:00:58

Session hijacking isn't really a problem anymore since Twitter uses HTTPS and HSTS to enforce it.

0 likes
thooor 2020-08-27 12:13:33

Use https anywhere (or https everwhere dont knoe the exact name right now). It enforces every site to use https, if available. If the site doesn't have https https everywhere will stop it from loading and you can choose between allowing https everywhere to open that site forever with http or only for that session

0 likes
Wolfie 2020-08-27 12:16:33

@thooor That's only if you enable EASE mode though. By default it just uses a pre-defined dictionary of sites.

0 likes
thooor 2020-08-27 13:43:56

@Wolfie You mean: Secure every workable website? I always have that on.

0 likes
Wolfie 2020-08-27 14:01:06

@thooor It should be called "Encrypt All Sites Eligible (EASE)" if you are running the latest version of the extension, at least, it is for me.

0 likes
thooor 2020-08-27 15:04:14

@Wolfie I run the german version of it, so i had to translate it manually via brain. If it's the 2nd option, then we are talking about the same thing

1 like
Wolfie 2020-08-27 16:07:32

@thooor 👍 Yup, same thing

0 likes
Syntax 2020-08-25 16:03:42

I'ma steal that key

0 likes
ZbiTx_ 2020-08-17 22:24:48

Is that half life I see

5 likes
Tarun Sagaram 2020-08-12 17:06:32

I wanna learn ethical hacking where can I??

0 likes
Replies (6)
Sumit Thakur 2020-08-20 20:32:23

@Navin Panday hey bro this link is not loading when I am trying to search it plz help me out

0 likes
thooor 2020-08-27 12:14:33

@Sumit Thakur Bc u may got hacked 🤦🏻‍♀️

1 like
The Good Kid Boy 2020-08-29 10:08:39

@thooor Are you being facetious?

0 likes
Sumit Thakur 2020-08-30 20:51:39

@The Good Kid Boy hey ..is this your website ?

0 likes
The Good Kid Boy 2020-08-31 04:17:54

@Sumit Thakur It belongs to the guy that Navin memtioned.

0 likes
Tarun Sagaram 2020-09-04 19:15:35

Thank you brother

0 likes
Jrezky 2020-09-14 20:04:33

Got anything fun in that little pill container?

0 likes
Cameron Saman 2020-08-21 09:24:30

what happens if you lose the key

0 likes
Replies (3)
shivraj roy 2020-08-25 02:58:04

Cameron Saman coffin dance

1 like
Cameron Saman 2020-08-25 03:38:43

@shivraj roy lol yah thats why I cant trust this key since you never know what might happen to it.

0 likes
thooor 2020-08-27 12:15:33

@Cameron Saman can't you just log in via the 1st 2fa thing you set?

0 likes
thooor 2020-08-27 12:10:37

But isn't 2fa via sms insecure? At keast i heard so

1 like
Replies (5)
dujilli 2020-08-28 02:57:12

this is a physical key

0 likes
thooor 2020-08-28 03:00:55

@dujilli Pls don't answer, if you don't know what i'm talking about

0 likes
川口篤紀 2020-09-02 17:35:35

then what does sms stand for

0 likes
AquilaFasciata 2020-09-10 01:16:54

Yes it is

1 like
thooor 2020-09-10 06:42:21

@AquilaFasciata Thx

0 likes
sookie the dookie 2020-08-23 23:41:52

GOD DAMB ADS IN MY HOME PAGE.

0 likes
Mako The Shark :3 2020-09-07 09:26:25

Korone Inugami: Yubi Yubi ^_^

0 likes
pee pop 2020-09-02 09:27:54

Everyone gangsta till the key is lost

3 likes
Rohit Kumar 2020-08-11 11:06:23

can i have one

1 like
Replies (3)
jetso2000 2020-08-18 08:14:13

You think he's just going to give you one?

0 likes
Manan Dubey 2020-08-20 13:13:32

Won't really protect u from xsrf and session hijacking

0 likes
Profgamer 2020-08-24 20:46:22

@Manan Dubey does session hijacking even work on big sites with https like Twitter and Youtube? I doubt it.

0 likes
Tara Temby 2020-08-20 19:52:48

Nooooooooo!

0 likes