Ryan Clough :scremcat:
@jerry Agreed.
> I know there are a bunch of people convinced you’re being pursued by these advanced adversaries. I worry about you. For many reasons.
I like to say that if you yourself have the time and energy to directly worry about these sorts of adversaries, odds are good you are *not* their target.
mark
@CiscoJunkie @jerry I guess my work has understood something along these lines. We are supposed to remove yubikeys while traveling and keep them separate from the computer. We are also not supposed to have stickers (this fails) that identifies the company, or wear clothing that could give away our employer.
It's high level paranoia being enforced as a CYA policy if things go wrong.
Merry Jerry 🎄🎅🕎⛄️❄️
I’ll reiterate what many others have said about the yubikey story - unless you’re the target of super sophisticated actors who do not want you to know they’ve stolen your yubikey*, this is a bit of a non-event and highlights the importance of keeping track of your yubikeys. Please don’t toss them, but do keep an eye out for further developments. Once an issue like this is identified, it attracts a lot of attention from many smart people and there may will be other findings in the future, but for now, yubikeys are good enough for most of us.
* I know there are a bunch of people convinced you’re being pursued by these advanced adversaries. I worry about you. For many reasons.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.