2

The same way you trust GPG running on your Intel or AMD CPU. You either trust the vendor or audit the code and hardware yourself. In practice, probably a bit of both. e.g. you trust the vendor of the micro-controller but audit the software running on it.


2

Solution Delete the keygrips of the keys in question from ~/.gnupg/private-keys-v1.d. You can list the keygrip IDs using gpg --list-secret-keys --with-keygrip. If all your private keys are on external cards like the Yubikey, you can delete them all using: rm -r ~/.gnupg/private-keys-v1.d See here for more information about the private-keys-v1.d ...


2

Per https://stackoverflow.com/questions/50622163/rpm-signing-using-x-509-certificatesenter link description here there is no way to sign RPMs with x509 style signatures that will be checked by the standard tools for installing RPMS. If signing x509 style is the important part then your best bet is to distribute the two files alongside the rpm along with ...


1

In theory, you only actually need the routing number and account number to issue a transaction (note that this is most of how transactions with cheques work). If there's a card, there's also another set of numbers you can use, namely the card number and expiration date (and usually the cardholder name and possibly the CVV, this is how most online ...


1

You should put this instruction into $HOME/.gnupg/scdaemon.conf, not pass it directly to gpg.


1

An example of dumb card is those used in hotels to replace physical keys. Or entry badges. These can be usually be cloned with equipment like a Proxmark, Proxmark pro or even an NFC-enabled smartphone. You can argue that they are less secure than physical keys, because someone who has portable equipment (that is readily available on the market and may ...


1

While U2F as only factor is only good in environments where a possession proof is enough (like those RFID card doors) and using U2F as first factor after the user name actually being (in my opinion) a decent way to stop others from even trying out passwords unless we have a resonable assumption that the person trying to sign in MIGHT BE who he is saying he ...


1

Use https://github.com/L1L1/cardpeek/commits/master Cardpeek, it can read VISA or mastercard and then there will be flags what of the SDA, DDA or CDA are supported on this EVM chip. There will be also info about CDCVM (ApplePay/Googlepay).


Only top voted, non community-wiki answers of a minimum length are eligible