Duo Founder Shows How to Automate a YubiKey for Agentic Logins
vincent_koc · x · 2026-10-25
Jon Oberheide, founder of Duo, published a new post on automating a YubiKey for agentic logins. The backdrop: agents increasingly need to log into legacy web portals that lack APIs or MCP, forcing interactive login plus scraping. Handing a username/password to an agent is easy, but 2FA steps (TOTP, SMS, push, security keys) are designed for human interaction and painful to automate.
He built a fun (and unfortunate) workaround that automates the YubiKey touch confirmation so agents can complete security-key 2FA. The post also touches on CAPTCHAs and anti-bot friction for agents—part of the larger debate over designing the web for agents vs. humans.
More from coding & agent
- Making AI-animated series: which tools manage multi-shot video workflows beyond ComfyUI? — dtdisapointingresult · 2026-10-25
- Nutlope shares his 5-step vibe coding workflow: voice prompts, grill-me skill, verification recordings — nutlope · 2026-10-25
- YC-backed AI browser Aside claims #1 on three browser agent benchmarks — brandon_galang · 2026-10-25
- CritPt, SciCode and Terminal-Bench Science: three science benchmarks as RL environments — geoffwolfe · 2026-10-25
- REA reverse-engineering agent framework hits #1 on GitHub Trending with full learning roadmap — blaizedsouza · 2026-10-25
- BeautifulRust: a Claude Code plugin distilled from Google's Rust style guide for idiomatic agent code — blaizedsouza · 2026-10-25