Talk:YubiKey

Computer Security: Computing Low‑importance

This article is within the scope of WikiProject Computer Security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer SecurityWikipedia:WikiProject Computer SecurityTemplate:WikiProject Computer SecurityComputer Security articles

Low

This article has been rated as Low-importance on the project's importance scale.

This article is supported by WikiProject Computing.

Things you can help WikiProject Computer Security with:

Article alerts will be generated shortly by AAlertBot. Please allow some days for processing. More information...

Answer question about Same-origin_policy
Review importance and quality of existing articles
Identify categories related to Computer Security
Tag related articles
Identify articles for creation (see also: Article requests)
Identify articles for improvement
Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc.
Find editors who have shown interest in this subject and ask them to take a look here.

Individuals with a conflict of interest, particularly those representing the subject of the article, are strongly advised not to directly edit the article. See Wikipedia:Conflict of interest. You may request corrections or suggest content here on the Talk page for independent editors to review, or contact us if the issue is urgent.

What products support what features?[edit]

It'd be nice to see a table of products (e.g. YubiHSM2, Security Key NFC, YubiKey 5 NFC) with exactly what tasks each can do (serve as a private CA, serve as the repo for OpenSSH keys, securely hold OpenSSH keys to allow one time connections from an untrusted computer, PGP signing / decrypt / keygen, x.509 same etc) — Preceding unsigned comment added by 63.77.19.196 (talk) 16:12, 1 February 2019 (UTC)[reply]

Unfortunately, there's not a clear comparison page on Yubico's site (and no info on older products). It looks like the various Yubikey 5 versions have identical crypto hardware, just different form factors and IO ([1]). The only product Yubico offers right now that doesn't have the same feature set as the Yubikey 5 is the "Security Key Series", which only does FIDO2 and U2F. AManNamedEdwan (talk) 09:28, 10 October 2020 (UTC)[reply]

Some proposed changes[edit]

This edit request by an editor with a conflict of interest was declined. Some or all of the changes weren't supported by neutral, independent, reliable sources. Consider re-submitting with content based on media, books and scholarly works.

Information to be added or removed: Replace social activism section with "Since 2014, Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation. The company says the decision is based on their mission to make the internet safer for all – without free speech there is no security."

Explanation of issue: Yubico is committed to working with people at risk around the world, regardless of political affiliation. Additionally, Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy.

References supporting change: https://www.yubico.com/solutions/advanced-protection-program/

DFee421 (talk) 23:10, 3 April 2020 (UTC)[reply]

Hi! Thanks for following at least some of the advice at Wikipedia:Best practices for editors with close associations. As I explained to you at User talk:DFee421, you are required by the Wikimedia Foundation's terms of use to disclose your employer, client, and affiliation with respect to any contribution which forms all or part of work for which you receive, or expect to receive, compensation. See Wikipedia:Paid-contribution disclosure. Please respond with an indication that you will do this at at User talk:DFee421, not here. Talk:YubiKey is for discussing possible improvements to the Wikipedia YubiKey article.

Your suggested changes are about possible improvements to the article, so lets discuss them.

It appears that you wish to have the current information at YubiKey#Social activism concerning the Hong Kong protests removed, giving as a reason "Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy." The problem is that the information was published in the South China Morning Post and in 立場新聞 Stand News, which Yubico has no control over. Wikipedia just reports what the sources say. You would have to contact those two publications and have them retract their claims for us to remove them from the article.

You also want us to add the claim "Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation."

I think adding info about Freedom of the Press Foundation using Yubikeys would be a great addition to the article, but per WP:V and WP:RS we need a source other than Yubico to back up the claim. Something on the Freedom of the Press Foundation site would be good, but something from a reliable third party source would be even better. Are there any sources for the claim? The claim about Google at [2] is also promising if we can find a reliable third party source for the claim.

In addition, the source you yourself provided from the Yubico website says nothing about the EFF, and nothing about donating anything to anyone. Instead it contains a 50% discount offer on up to ten devices for qualifying organizations.

--Guy Macon (talk) 00:08, 4 April 2020 (UTC)[reply]

Which claim about Google in that article is in need of a third party source? The Advanced Protection Program is obviously a Real Thing, and the main page already has a (apparently) good source for Yubico's work on U2F. AManNamedEdwan (talk) 09:39, 10 October 2020 (UTC)[reply]

It it's "obviously a Real Thing", then you should be able to find reliable second-party sources for it, rather than relying on the Yubico web page. Also, establishing that Google's Advanced Protection Program exists does not establish the "Yubico has partnered with Google on this initiative" claim. --Guy Macon (talk) 15:36, 10 October 2020 (UTC)[reply]

Ah, yeah, I have no idea if they partnered to create the Protection Program or if that Yubico page is just spinning on "we worked together on U2F, so this is technically a collaboration." AManNamedEdwan (talk) 20:02, 10 October 2020 (UTC)[reply]