Tell me if I have this right:  A Yubikey has 2 "profiles" -  a short press and a long press.

If this is correct, then MtGox is using them both.  A short press to login, and long press to withdraw funds.