Yubico Forum

You're right - it does not work by the means of the autorun feature but rather that a WIN+R + string is sent.

It is a different configuration item so yes - it can be wiped without affecting the OTP generation settings.

But as this is an unofficial feature of the Yubikey (there are quite a few issues with it), we don't have a tool for it. You need to use the configuration API and write a blank string to SLOT_NAV (2).

Regards,

JakobE
Hardware- and firmware guy @ Yubico

Oops my bad, you are correct.
It does 100% work without the U3 autorun.

Hmm, looks like there's a similar command for KDE & GNOME = Alt+F2
Perhaps it'll work with "Go to Browser" Cmd+L for Mac OS, if Safari/FF3 is already running?
http://en.wikipedia.org/wiki/Table_of_k ... _shortcuts


Here's three ways to Disable or control Winkey on keyboard (plus there's TweakUI)

How to Disable Winkey on keyboard:
(Formerly Q216893, Now uses Keywords: kbenv kbinfo KB216893)
http://support.microsoft.com/kb/216893

Fully control the keyboard with "I Hate This Key Deluxe Edition":
http://www.bytegems.com/ihatethiskeydeluxe.shtml

Another how to Disable Winkey on keyboard pre-Vista solution:
http://www.windowsnetworking.com/kbase/ ... board.html

More info about the Win Key:
http://en.wikipedia.org/wiki/Windows_key

Thanks, JakobE.

That's exactly what I would like to do. I agree that there are some potential problems with this feature. Perhaps I'm paranoid, but I find that feature a bit of a concern from a security point of view since it could be used for something other than directing a browser to a web page. I realize that someone would have to program the Yubikey to do that, but envision at least the theoretical possibility that a malware script could reprogram the Yubikey to do something undesirable which could then occur on each machine on which I used the Yubikey.

I understand from another thread that there's a more user friendly configuration utility in the works and will probably await its release before messing with this.

DH2007,

I appreciate the info, but don't really want to completely disable the Win key, merely the Win+R combination. Looks like I'd have to use something like a simple AutoHotkey script to do that. Now that I know that I can reprogram the Yubikey to remove the auto-navigation without interfering with the OTP function, I can do it that way and not have to fiddle with the key mapping.

Dick

I must admit I used the U3 Uninstall and never considered the Win key a threat.
Simply because the Win key seemed to be a physical access security issue.
(Versus a software (worm/virus/trojan) type threat.)

Seeing the point you made Dick.
It's time to rethink the security layers & computer hardware again.


Hmmm, I've heard good things about a program called Sandboxie but I haven't tried it yet.

Hi, pilot, what do you really mean? I thought the question is that can you program the auto-navigation URL to a different URL other than Mashed Life ???

Is there any protection about who can re-program the URL? If there is no password protection of the authority, that is risky business.