Yubico Forum

Community Projects • [Community] - Forum going read only. New KDB on its way.

2018-01-30T09:26:55+01:00

For the security and experience of our user community, we have decided to set the forum as read-only and wipe all user account information. All historical posts and announcements will be archived and remain publicly searchable.

In 2018, we will be publishing a searchable knowledge-base system that allows the community to provide direct feedback on articles and make suggestions that will be reviewed by Yubico staff. We sincerely appreciate the participation of our user forum over the years and hope to continue serving your for years to come.

Statistics: Posted by Tom2 — Tue Jan 30, 2018 9:26 am

Community Projects • Status of Wordpress woo-yubikey

2018-01-04T01:32:24+01:00

Hi all,

Wondering if anybody is aware of the status of https://wordpress.org/plugins/woo-yubikey/ (Linked from the "Your CMS & the YubiKey" page), hasn't been updated in six months and appears to be broken on at least Wordpress 4.9.1.

Just added it onto my Wordpress installation, but when I attempt a yubikey login the plugin throws the following error;
Warning: hash_equals(): Expected known_string to be a string, null given in /wp-includes/pluggable.php

If it's not maintained anymore I'll have a dig around and see if I can fix it myself.

Thanks,

-J

Statistics: Posted by jrandomdude — Thu Jan 04, 2018 1:32 am

Community Projects • Encrypting with an API and Yubikey 4

2017-07-17T01:45:54+01:00

I have a project I'm working on where I need to use a Yubikey 4 to symmetrically encrypt/decrypt data on Mac & Windows.

Ideally, I could use an API that wouldn't require having the user install software, but that's not a requirement. If I do have to install something; the simpler the installation, the better.

I can call into the API with Java or C.

I'll need to:
1. Load a symmetric key into the yubikey (and others accessing the same application)
2. Call to an inserted yubikey with an API to encrypt or decrypt a block of data

Thanks for any hints on where to begin.

Cheers!

Statistics: Posted by crusso — Mon Jul 17, 2017 1:45 am

Community Projects • Re: [PROJECT] - Yubikey Monitor (Standalone)

2017-03-15T18:15:02+01:00

What happens if you attempt to login without the key? I assume the program will lock you out continuously, any way around this?

A scenario where you would potentially not have a key is if you'd lost it or forgotten it and the last time you used your pc was with the key...

Thanks!

Rodrigo Carrilho

Statistics: Posted by rodrigocarrilho — Wed Mar 15, 2017 6:15 pm

Community Projects • Re: [Project] [OS X] Yubikey Lock and Unlock Daemon for Mac

2016-09-30T22:23:02+01:00

The readme on github mentions 2 requirements:
* Configured integration with Yubico PAM module
* Require password immediately after sleep or screen saver begins

while the second makes sense, what does the yubico pam integration bring ? I found a tutorial about it at some point but it would only add the yubikey as a 2nd authentication factor (requiring a pin in addition to the password). Have you been able to work around that and at least remove password entry ?

I am hoping this daemon can be modified to allow for a relaxed security mode. In which it would behave like [url=https://code.google.com/archive/p/reduxcomputing-proximity/]proximity[url] and allow lock / unlock only based on the physical device presence with no additional input. (and yes I am aware that this lowers the security of the system compared to 2 factor, I still think user experience and security is better than the classical password).

Statistics: Posted by jeantil — Fri Sep 30, 2016 10:23 pm

Community Projects • Re: YubiGuard - Prevent accidental release of YubiKeys.

2016-09-01T20:18:35+01:00

Hi Tom2. Great I'll hope many more people will find YubiGuard useful.

With the most recent version I added a new feature: The Screen Lock Mode.

The screen lock mode allows for automatic and immediate screen lock when a YubiKey is removed from its USB port.

This is a security feature. I assume many people like me use YubiKeys to login to their computer. With the new screen lock mode you can login into your system and remain that way until you remove your YubiKey from its USB port. Then you will require it again to login. Therefore the presence of the YubiKey is more strongly required for using the system. Somewhat analogues to your car keys which need to be in the lock the whole time you are driving.

As always I welcome any feedback and (especially) stars on GitHub.

Statistics: Posted by YubiGuard — Thu Sep 01, 2016 8:18 pm

Community Projects • Re: [PROJECT] - Yubikey Monitor (Standalone)

2016-08-31T11:27:49+01:00

hi all

Would like to report that it works fine on my pc(win10 pro)(yubikey4) many thanks for a usefull program .
Maybe one improvement would be a pass code or pin to exit it from the taskbar , apart from that it does everything i want .
Again many thanks

Statistics: Posted by Hairyboggit — Wed Aug 31, 2016 11:27 am

Community Projects • Re: YubiGuard - Prevent accidental release of YubiKeys.

2016-08-08T10:34:25+01:00

Thanks for this post, will forward to marketing.

Statistics: Posted by Tom2 — Mon Aug 08, 2016 10:34 am

Community Projects • YubiGuard - Prevent accidental release of YubiKeys.

2016-08-07T18:09:35+01:00

Quote:

Oooops! I just posted my most intimate passphrase into the plains of the web.
Happened to me. I am certain it happened to you.

Especially with the Nano form factor accidental triggering of your YubiKey happens easily.
For example when just re-positioning my laptop I often haphazardly touch my YubiKey potentially bringing doom over my security setup.

For Linux users I just created a tiny script to protect against this danger.
I call it YubiGuard. You can find it here together with the necessary instructions:

https://bfelder.github.io/YubiGuard/

It is much more advanced than YubiSwitch, a less sophisticated predecessor.
Several notable improvements in this regard are:

No root privilege required to run! (A much criticized security flaw with YubiSwitch.)
No unintended output release after reactivation, if you pressed your YubiKey while locked!
Detects YubiKeys automatically, no need to hardcode ids manually.
Can handle multiple YubiKeys concurrently.
Timeout which locks off YubiKey after 5 seconds, to keep "the lid closed tight".
Automatically locking after YubiKey has been triggered. (Smart isn't it?)
Panel indicator showing the activation status of YubiKey(s).

It works meticulously on many popular Linux Distros and with all YubiKey models tested.
(A shout out to Yubico who provided additional models for testing.
It demonstrates how this company cares for its community and how it is committed to the development of the YubiKey ecosystem.)

Its easy, fun to use. I am certain the Linux users among us will find this tool very useful.
If you like YubiGuard just let others know by leaving a star on its GitHub page.

Download zip archive:
https://github.com/bfelder/YubiGuard/zipball/master

Statistics: Posted by YubiGuard — Sun Aug 07, 2016 6:09 pm

Community Projects • Yubikey management on node.js

2016-05-30T19:24:52+01:00

Hello guys, we created a very simple native module to work with yubikey device inside node.js.

We basically just translated the yubico-piv-tool calls to a node.js native module, what allows us to manage the device with a visual tool, our goal is to create a GUI using electron to manage the device. The module can be founded here https://github.com/agco/yubikey-piv-node, if you have any feedback, just le us know.

Best regards.

Statistics: Posted by tiagodeoliveira — Mon May 30, 2016 7:24 pm

Community Projects • [PROJECT] Media MicroCloud- Android Crypto Volume, Webserver

2016-05-21T17:01:38+01:00

Project name: Media MicroCloud

License: https://nuvolect.com/mediamicrocloud_terms

Description: Media MicroCloud combines CamCipher, the IOCipher file system, the Nanohttpd web server and the popular elFinder and PhotoSlide web apps. You can record, save and manage encrypted photos, videos, and files of any type, edit notes, etc. The product is in Beta, i.e., we are still implementing features, testing and fixing bugs. YubiKey Neo authentication unlocks the Android app and embedded Web app.

Platforms: Android SDK 21+, Phones, and Tablets

Problem 1: We use the YubiKey two ways in the app. To gain entry to the app on Android, YubiKey Neo sometimes requires several cycles to authenticate. Sometimes it cycles forever. Hold the Neo to the back of the phone. The Nexus 5X produces an audible tone 2 or 3 times while it is trying to connect via NFC. The second method is using a static password to gain entry to the web app, this works fine.

Problem 2: This is not a YubiKey problem but perhaps this security savvy group will have some guidance. The dreaded "Your connection is not private" browser warning. We use a self-signed security certificate. There is no domain name or static IP address to for a browser to validate the security certificate, The IP is dynamically assigned to Android by your WiFi access point. Android is the web server.

Links:
* Marketing - https://nuvolect.com/mediamircocloud
* Roadmap - https://nuvolect.com/blog/posts/mm-roadmap/
* Issues & Suggestions: https://github.com/TeamNuvolect/MediaMicroCloud/issues
* Google Play - https://play.google.com/store/apps/deta ... microcloud

You can try it yourself, search Google Play for "Media MicroCloud".
Comments and suggestions appreciated.

Statistics: Posted by MattK — Sat May 21, 2016 5:01 pm

Community Projects • Linux user permissions over X11, seperate display, VNC?

2016-03-24T18:18:25+01:00

I know this is kind of unique and atypical, but I occasionally use yubikey 4 and access a box via VNC occasionally (so, display is :1, not :0). If I access the machine directly as a user, yubi personalization and tap work fine. Over VNC, I do not have correct permissions to use yubi personalization or tap. I'm running Arch Linux, so latest systemd, udev and dbus (I imagine I'd need some custom rule for these). Any ideas on rules? Hopefully someone has done this before.

JSkier

Statistics: Posted by jskier — Thu Mar 24, 2016 6:18 pm

Community Projects • Re: [PROJECT] KeeChallenge challenge-response for Keepass2

2016-02-26T22:57:31+01:00

KernelSnarky wrote:

The keechallenge plugin is recongnized by keepass and seems to funtion correctly however it seems to have an issue talking to the yubikey

Made the account just so that I could help you, for I had the same problem but managed to solve it.

What worked for me was running KeePass with sudo. Since I used mono + the portable version I just did:
sudo mono path/to/KeePass.exe
and the plugin and everything worked.

Hope it helps!

Statistics: Posted by arigatou — Fri Feb 26, 2016 10:57 pm

Community Projects • Re: [PROJECT] - Yubikey Monitor (Standalone)

2016-02-10T15:35:53+01:00

it might be more intresting to use the smartcard to check instead of challenge repsonse, especially since it doesnt take up a slot.

Statistics: Posted by My1 — Wed Feb 10, 2016 3:35 pm

Community Projects • Re: [PROJECT] - Yubikey Monitor (Standalone)

2016-02-10T09:54:32+01:00

It's not working for my neo as well.
I tried all mentioned solutions:

x64 API installed
API visibility set
login tool installed

All done with restarts inbetween, I even reinstalled the API after the login tool to see if the order of installation matters.

The system is win 8.1 Enterprise x64 in a domain environment.
I also tried starting the tool with local or domain admin rights but it didn't matter.

The error is that it is hanging at the "Pleas plug your yubikey." prompt. Plugging doesn't make it go on, even if I wait for 15 minutes. And as soon as I press the button it says "Setup canceled!" (if I see this correctly as it closes the window immediately).

Any help?

Statistics: Posted by Barbarossa — Wed Feb 10, 2016 9:54 am