Two-Factor Authentication Made Easy with Yubikey NEO - CES 2013

Nixie Pixel visited Yubico to check out their Yubikey NEO, which generates two factor authentication to secure your mobile identity.

Product Name: Yubikey Neo
Company: Yubico
Release Date: Available now
Price: $50
Features: Generates new 44 character encrypted code each time

Watch CES 2013 coverage in one spot! See it ALL at http://Revision3.com/CES2013, on YouTube at http://YouTube.com/Revision3, or on iTunes at http://bit.ly/Rev3CES2013

Connect with Hak5
Twitter: http://twitter.com/hak5
Facebook: http://facebook.com/technolust
Google+: http://plus.google.com/10541951343884...

Darren Kitchen
Twitter: http://twitter.com/hak5darren
Facebook: http://facebook.com/darren.kitchen
Google+: http://plus.google.com/10170410316144...

Shannon Morse
Twitter: http://twitter.com/snubs
Facebook: http://facebook.com/snubsie
Google+: http://plus.google.com/10265457055605...

• Category

  Science & Technology

[thehspda]

Get Nixie Pixel on Hak5 !!!!

[Black Rose]

Yubico has the best customer service that I've ever seen.

[FatLingon]

Judging from your response, I can tell that I was probably unclear in what I wanted to know. I'll rephrase what I am wondering about into this question.

How can the computer that receive the key tell if the key is freshly generated, or if it was generated 5 month ago for use on another computer (a computer that had a key logger)?

[JamieVegas]

The 44 characters are generated based on either time or sequence from a DIFFERENT key, stored on the device, that never gets transmitted.

[JamieVegas]

No, it was because she didn't know what the fuck a one-time password meant. Everyone "cares" about their looks.

[MrIzzyreal555]

I bought this combo with a lastpass account. Works good! I would recommend it.

[FatLingon]

So, she brings her sexually oriented personality to her videos. Prude people might argue it's poor taste and what not, but I don't see why you think it makes her or her nerdy interests fraudulent?

As for denying that she put forth her sexuality in her videos, I just rewatched her video "I'd Rather Vlog Naked", I suggest you do the same.

[NedTheDread]

In addition to my other reply, I offer the analogy of the "Reply Girl"...

Nixie Pixel may have a genuine interest in technology, but she is using her female features and sexy voices to attract viewers, and doesn't focus on the content. This is similar to how reply girls just show their tits and people watch their videos, regardless of content.

Snubs has never "strut her stuff" for views, used sexual innuendo, or posed erotically for the thumbnails, she provides good content, not just sexiness...

[NedTheDread]

I agree with what wolvee123 said, but I will provide my own opinion about Nixie Pixel...

From what I've seen from her videos, I'll admit I was subscribed to her for a long time, it seems like she cares more about the views than the content.

She'll be talking normally, and then when it comes to the "tutorial" or "demo" part, she puts on this sexy, whispy voice, an act, and it's a distraction. I get that sex sells, but it really seems like the sex is all that sells, she should focus on content...

[wolvee123]

She's a fraud because she cries "woah is me" when people confront her about the sexualization of her videos. She makes stupid ignorant videos saying that "she doesn't do anything of the sort" then puffs up her boobs, erotically cuts videos with her kissing a woman and constantly is making suggestive refferences. I'm sure she knows her Linux but she's a joke.

[FatLingon]

Do you consider her to be a fraud because she care about her looks, her personal hygiene and that she can carry a conversation with someone of the opposite sex? Cause, it's possible to do all those things and still foster a genuine interest in technology.

[FatLingon]

Thanks for taking your time to explain this to me.

What makes ever generated password a "one-time" use only. How can one application tell that a password has been used on another computer? What if someone makes a password logger, then feeds that password into another computer via a yubikey emulation.

I guess it could be avoided if there is a time signature in the password, like, the yubikey generates a password based on local time of computer. Hostname + mac-adress would make it extra secure.