logoalt Hacker News

baqtoday at 5:09 PM1 replyview on HN

I agree completely, except looking at my 2fa app I'd need 20 physical tokens, so we actually need a super-duper-yubikey


Replies

Aachentoday at 7:41 PM

Yeah, I should have pursued the idea ten years ago of making a usable 2fa hardware device (that confirms what you're authenticating and an attacker can't simply pull auth codes for whatever they want)

Still, I'm plenty okay with my phone as a second factor for my laptop and vice versa for nearly all services. The rest is about tying things to a government identity (bank cares only if it's me who's authorising the transaction; government cares only if it's me who's requesting a student loan) and can be done with the chip that's already in my identity document and a single 20€ nfc chip reader or by using a phone as nfc reader