<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
<link rel="self" type="application/atom+xml" href="https://forum.yubico.com/feed.php?f=26&amp;t=1611" />

<title>Yubico Forum</title>
<subtitle>...visit our web-store at</subtitle>
<link href="https://forum.yubico.com/index.php" />
<updated>2014-11-20T10:08:59+01:00</updated>

<author><name><![CDATA[Yubico Forum]]></name></author>
<id>https://forum.yubico.com/feed.php?f=26&amp;t=1611</id>
<entry>
<author><name><![CDATA[joeljacobson]]></name></author>
<updated>2014-11-20T10:08:59+01:00</updated>
<published>2014-11-20T10:08:59+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=1611&amp;p=6276#p6276</id>
<link href="https://forum.yubico.com/viewtopic.php?t=1611&amp;p=6276#p6276"/>
<title type="html"><![CDATA[Smartcard (CCID) mode only]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=1611&amp;p=6276#p6276"><![CDATA[
In mode -m81, i.e. CCID only, a key press enables or disables the SmartCard.<br /><br />Is there a way to force a key press for each sign operation? That would ensure I know at least how many signatures I have created. Otherwise an intruder with complete access of my computer could generate any number of signatures without my knowledge, by simply sniffing the PIN-code and then generating signatures while the SmartCard is enabled.<br /><br />Even if I would enable the NEO SmartCard just before signing, and then quickly disable it afterwards, the intruder could of course manage to generate a signature before it's turned off.<br /><br />Many thanks for any advise.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=3295">joeljacobson</a> — Thu Nov 20, 2014 10:08 am</p><hr />
]]></content>
</entry>
</feed>