Are you still only using two factor authentication? I'm way ahead of you with my 7 factor authentication πŸ”
@sash hmm, now thinking how it could be nice to have a usb selector. Little dropdown on which usb device is active/powered. 
@wmd @sash Big clacky rotary switch that physically connects/disconnects the different external USB ports from the interface
@zuthal @sash cursed approach: usb hid rotary encoder that controls it in software, but also enables/disables itself.
@sash you lie i only count 6
The password is #7. And actually there were two more tokens that didn’t fit in this hub :)
@cadey @sash But if 1 yubikey counts as 2fa...
@sash this is pretty much the opposite energy of
@sash collect my 7 keys to unlock a hidden door 
@sash set a separate pin for each key to unlock the dreaded 12-factor auth
@sash something you have (6 yubikeys) + something you know (the sequence in which you use them)
@sash 7 factor authentication but all 7 factors are passwords
@jakjak
The SAME password, of course.
@sash
@[email protected] @[email protected] @[email protected]
And the password is "F@ct0r" (uppercase letter, number and special character added solely to satisfy the requirements πŸ₯Ί)

@sash

Don't care about no factors, my passwords are all prime numbers.

@sash 🐭 You must collect all 7 factors of authentication to fight the final boss
@sash next logical step: pass the ubikeys around in your lan using usb-ip

@sash i want a HSM machine!

We got a hsm machine at home!

A hsm machine at home:

@sash this seems way better than the dozen or so RSA dongles i got on webcam
@silhouette until the hub glitches and fries every key at the same time πŸ”₯
@sash combining multiple yubikeys to form a tekey
@sash
In binary that is 128 factor authentication.
@sash
Don't give them ideas please :)

@sash What's the seventh factor?

No wait, it's love isn't it?

@sash "GOOD LUCK, I'M BEHIND SEVEN FACTORS!"
@sash ​:nerd_face:​​​:index_pointing_up:​​ actually, it's still two factor authentication because you only have the known auth type (password, pin, whatever) and the physically possessed kind (hardware keys) ::::3

(tho ngl, that's quite a sic setup there
😳)
@sash
- Something you know
- Something you have
- Something you are
- Something you mispronounce
- Something you think
- Something you keep in a freezer and get out just for special occasions when there are no recording devices to capture incriminating evidence
- Something you offer as a sacrifice

@DocBohn @sash

- Something blue
- Something new
- Something old

...wait, no, wrong list.

@sash

This and you have to touch your ubikeys in a specific order to authenticate 

@sash Only got 5 here 
@jill @sash I told procurement I need 2 Yubikeys fast. A week later I hear the sales rep wants to first get courted (long email chain) and go on a date or 2 (video calls). I didn't know this was such an investment.
And here you got 5... did you have to co-sign a 30-year mortage?
@tecHunt @jill I just kind of gathered them over time. Some are a bit old and crappy, but they work for U2F. My newest is a Token2 Bio3, didn't fit in the hub.
@tecHunt @sash Got all of them along the years (it followed the SoloKey project for a while since it was made using a Rust-based firmware) and got the Yubikey "for free" at its first job (they bought some and forgot they ever bought them when it left :D)
The one it currently uses is the Nitrokey 3A (~60€ right now)
@sash And here I am with only one #Yubikey with 30 accounts on it, because I found out afterwards you can only use 2 keys when you set up your 2fa and not after you already set up 2fa on one key.
@sash well... to me this looks like 2 factor authentication (Factor 1 being "Knowledge"/the password and Factor 2 being "Possession" of those USB keys). Increasing the number of USB dongles does not increase the number of security factors

@sash now I want to see how many factors @tychotithonus could pull off with his collection and a dozen or so USB hubs...

/for context: https://www.techsolvency.com/mfa/security-keys/

Tech Solvency: Security keys

An overview of security keys, including tips and gotchas, and my lab / collection / museum of security keys.

@sash "touch your key to proceed"
"Goddammit WHICH ONE?"
@sash @selectric something you are, something you know, and something you misplaced
@sash something you have (a bulk discount)
@sash If they're all in the same place so they can all be stolen in one go then that's one factor authentication.
fleaz (@[email protected])

Attached: 1 image For maximum security I use MultiMultiFactorAuthentication πŸ”“

chaos.social
@sash I feel... post de facto...
@sash I like the rainbow one!

@sash @liw ahem @tychotithonus πŸ‘€β†‘β†‘ πŸ”‘Γ—10e6 you're up!

edit: oh darn, @fraggle beat me to it, sorry ( https://social.coop/@fraggle/116336621993878051 )

fraggle (@[email protected])

@[email protected] now I want to see how many factors @[email protected] could pull off with his collection and a dozen or so USB hubs... /for context: https://www.techsolvency.com/mfa/security-keys/

social.coop