Good point. I'm aware of the icloud method of imessage cracking, but I often forget that I'm not always the weakest link; it's up to the people around you as well.
brownmustardminion
joined 2 years ago
I eventually managed to get the yubikey to work, although it is very buggy and the steps to get it working are unacceptable IMO for the "most secure phone OS". Hardware keys should be a major priority and should simply work just as easily as using passwords, but it seems to be a stale open feature request for a few years. Luckily for me, once bitwarden is authenticated with 2fa I don't need my hardware key unless I reinstall it. So that's one major hurdle behind me. Another plus is that while you need sandboxed google services to utilize hardware key auth, they don't need network permissions to work.
If iMessages are e2ee and you aren’t using iCloud, is there any evidence your messages aren’t private? As far as I’m aware iMessage is considered a very secure messaging channel. It seems like most people distrust it due to the Apple affiliation. Not that I blame them, I feel the same about Google.
Just for the sake of getting used to / transitioning to a single gos phone, does it make sense to use the insecure phone as a hotspot and utilize the pixel without a sim (so data only device). I would be using e2e encrypted apps for texts and calls so this makes sense in my head.
Appreciate the info.
It seems absurd to me that a third party online service is required for a hardware key to work in the first place. I figured it would be authenticating strictly between the locked service and the user.
Most helpful comment. Thank you. I’m heavily considering carrying two phones. My biggest hurdle is the Yubikey at this point because it locks me out of my password manager and most of my more important apps.
You mention using the usb-c connection. I tried that but it doesn’t seem to register. I guess I just need to research some more.
Thanks for giving me some hope!
When I initiate Yubikey auth via NFC in Bitwarden, it takes me to a Yubikey demo page. From what I’m reading online, for some reason I need to install google play for the key to work correctly.
Also seeing lots of chatter on the forums that a recent gos update broke most banking apps and they’re working on a fix.
Thank you for the info about the keyboard. I’ll check that one out.
I really like mostly everything about GrapheneOS on paper. The UI, user profiles, security features. It’s the inability to use it in a practical setting that’s frustrating me. Yet I see many people claiming they switched to GrapheneOS a month or a year ago and love it. So there’s got to be a solution. I can’t imagine those individuals installed gos and it was smooth sailing since day 1.
Damn I wish I would've known sooner. Isn't there a concern of not matching the same drive similar to how you can't mix and match RAM sticks?
+1. Resolve is leaps and bounds ahead of Premiere and even After Effects when you consider Resolve has Fusion built in. I work on high level projects and often run into huge issues trying to work with Premiere projects. Most editors still use it simply because it was the first NLE they picked up. It lacks proper color management and its ability to export out to other software whether for post audio, color, or VFX is abysmal. I switched to Resolve about 5 years ago and while it isn’t without its faults, I’ll take it over Adobe bullshit any day. Sometimes I have to open editors premiere files to troubleshoot and I want to blow my brains out. Easily can wipe out an entire day just troubleshooting premiere projects. It’s funny because when I first got into the industry I was using Premiere and they were trying to push me to use Avid. I felt the same way about Avid as I currently feel about premiere.
For my own understanding, what potential dangers are there using a Yubikey as opposed to an open source key?
I often wish all services could provide an opt out "I'm aware no 2fa is risky but I really don't give a damn about this account so fuck off with the constant email verifications". Or if companies insist on forcing 2fa, at least support hardware keys. Don't even get me started about banks...