Top all-time · #22312
Cryptsus
Company blog · cryptsus.com/blogsecuritysystems
Cryptsus is the company blog at cryptsus.com, writing about security and systems. Since 2019, 3 different Hacker News readers have linked it 12 times, most often “Configuring OpenSSH with YubiKey Security Keys U2F Authentication”. It is still writing: the last post was on 2025-04-05, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link Cryptsus posts on hardware security keys such as YubiKey, covering passwordless logins, SSH with OpenSSH, and passkeys for infrastructure. Commenters discuss how secure these login methods are.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Cryptsus is a security consulting group of expert hackers specializing in securing systems and networks, authentication systems and vulnerability management.
Most-linked posts?
- Configuring OpenSSH with YubiKey Security Keys U2F Authentication3 people · 5 mentions · first linked 2020-02-17
What Hacker News says?
Yes - but it works smoothly: https://cryptsus.com/blog/how-to-configure-openssh-with-yubi...
Comment linking /blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html
on “Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys”Submitted Secure your SSH server with public key Ed25519 elliptic curve cryptography as a story · 5 points
HN discussionWorks smoothly: https://cryptsus.com/blog/how-to-configure-openssh-with-yubi...
Comment linking /blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html
on “OpenSSH 8.2”Submitted ICMPdoor – ICMP reverse shell for Windows 10 and Linux [undetected] as a story · 3 points
HN discussionFor SSH, use native U2F/FIDO2 OpenSSH support instead: https://www.openssh.com/txt/release-8.2 https://cryptsus.com/blog/how-to-configure-openssh-with-yubi... TOTP with a PAM module is insecure since it's not cryptographically tied to the session like public key auth and can be phished. The author's suggestion to use it for passwordless login is dangerous when applied to SSH sessions!
Comment linking /blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html
on “Passwordless Logins with Yubikey”Submitted Security controls to mitigate MITRE ATT&CK threats on a Windows 10 domain as a story · 3 points
HN discussionNowadays, most companies enforce MFA (Multi-Factor Authentication) for initial and persistent authentication. Some companies claim to be secure once MFA is configured on all (non-service) accounts. However, this Uber hack proves cloud-based MFA push notifications can be abused, even when conditional access is configured. This article explains how to detect this attack: https://cryptsus.com/blog/azure-mfa-bombing-det…
Comment linking /blog/azure-mfa-bombing-detection-sentinel.html
on “Uber hack caused by contractor; MFA fatigue attack used by TA”Submitted Configuring OpenSSH with YubiKey Security Keys U2F Authentication as a story · 2 points
HN discussionTo make matters worse, I don't even know on which websites I have my YubiKey registered. I just checked mine, and it shows my Microsoft credentials and NVidia. But I know for a fact that I also use it on Vanguard and BofA (which doesn't support keys on iOS in case you're wondering). So I 1) cannot extract the masterkey from my YubiKey and move it to another one to make an exact duplicate 2) cannot discover the place…
Comment linking /blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html
on “Passkeys for Infrastructure”Submitted WireGuard on OpenBSD 6.6 Hosted on Vultr with Full Disk Encryption as a story · 2 points
HN discussionSubmitted Edge OpenBSD PF Firewall Securing the First Gate of Your Network as a story · 2 points
HN discussionSubmitted Blog post on how to configure OpenVPN with X.509, LDAP and 2FA on Ubuntu 18.04 as a story · 1 points
HN discussion