[qubes-users] Re: Yubikey attached to an AppVM - possible?

2019-05-01 Thread FenderBender
On Saturday, June 9, 2018 at 2:56:29 AM UTC-7, John wrote:
> Because of my setup I can't install a sys-usb qube. Is it possible to attach 
> a Yubikey 4 or Neo to an AppVM such as Personal?
> 
> The USB widget does not recognize a Yubikey plugged into a USB slot after 
> booting Qubes OS, although it is seen by Dom0 using the lsusb command, so 
> presumably it's being blocked for being an 'abnormal' USB device.
> 
> I notice various people having problems getting Yubikeys to work, but a quick 
> search didn't bring up this particular issue. Is a sys-usb necessary or has 
> anyone found a workaround? 
> 
> Thanks
Was thinking of picking one up, but upon research I had thought that the trend 
is that Yubikeys are not any longer recommended. 
https://en.wikipedia.org/wiki/YubiKey#YubiKey_4_security_concerns 

Perhaps they are still better than other options so I will follow this thread 
and reconsider my purchase but here are some other avenues to achieve 2FA: 
https://alternativeto.net/software/yubikey/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3bb88142-07c4-471f-ab2e-030178056412%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Yubikey attached to an AppVM - possible?

2019-04-27 Thread Jon deps

On 4/27/19 8:44 PM, j.granyt-re5jqeeqqe8avxtiumw...@public.gmane.org wrote:

Did you figure out how to do it in the end?



I ended up finally re-discovering a new trick for OTP eg  LP webpage 2FA 
using debian-9 minimal as the template


https://www.qubes-os.org/doc/multifactor-authentication/

pretty slick,  now I can leave my  android off,  and not use SMS for 2FA


for U2F logins : there is also a write up in the docs,  but its way over 
my head  prolly circles back to  Qubes doesn't want  HID-keyboard 
emulation to have access via USB


for the few sites for U2F I use, I just use Chromium ,  if you Yubikey 
has both IIRC you have disable one or other of the functions anyway


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a80b620a-8736-d43b-1e53-cc8c69fc8109%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Yubikey attached to an AppVM - possible?

2019-04-27 Thread j . granyt
Did you figure out how to do it in the end?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b269bddf-b8c8-4094-8865-1741c337d074%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.