Re: mtgoxx.tk phishing scam - Hold on to your Bitcoins!

Can they get through the yubikey protection through phishing (i.e. even if I hypothetically foolishly enter my mtgox password)?

I would guess so, if you also enter the Yubikey code. (I am not very familiar with Yubikey's operation, though.)