Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Your Android Phone Is a Security Key

blog.google

Post reply on HN
Print view View original

31–40 of 144 posts

Re: Your Android Phone Is a Security Key

#31

Post by daphneokeefe »

daphneokeefe wrote: post #20

Can someone explain how TFA (or any security feature that relies on my phone) works when the phone is unresponsive -- dead battery, no cell or internet reception, hardware failure.

I am interested in how frequent travelers manage these security measures (especially abroad). For SMS: quickly obtain a burner phone, log in to Chrome, something something SMS or Authenticator? For Authenticator: log in to Chrome on any machine you can locate that you can trust? For the printed backup codes, you carry them with you as you travel, and through security?

I am trying to develop a security process that I can rely on. It only has to be better than what I have now, it doesn't have to be bulletproof.

Re: Your Android Phone Is a Security Key

#32

Post by macspoofing »

daphneokeefe wrote: post #20

Can someone explain how TFA (or any security feature that relies on my phone) works when the phone is unresponsive -- dead battery, no cell or internet reception, hardware failure.

Yes. You need an alternate backup mechanism, like pre-generated one-time codes, or (shudder) SMS.

Re: Your Android Phone Is a Security Key

#33

Post by macspoofing »

krzyk wrote: post #28
mattjack wrote: post #21

Earlier quoted context omitted.

It won't--so you'd have to use the backup methods they made you set up, like SMS codes, Authenticator, printable backup codes, etc.

SMS and authenticator won't work on a dead phone either, so you are left with keeping a paper with backup codes.

>so you are left with keeping a paper with backup codes.

It's not magic, there isn't any other way.

Re: Your Android Phone Is a Security Key

#34

Post by oneplane »

> Your Android Phone Is a Security Key

no it's not. it's pretending to be, but without vendors actually maintaining and investing in their forks and the hardware having a known good security enclave, you might as well post your credentials on twitter.

Re: Your Android Phone Is a Security Key

#35

Post by NikolaNovak »

ksec wrote: post #30

Off topic: This is the state of web we are in, and this is coming from Google. [1] I have literally 20% of the screen displaying useful information. The others are all useless navigation or related crap. Just seeing it nearly got me to puke. It is one those problem in general where the web page is responsive and mobile first. [1] https://ibb.co/fCfmW6h

I fully 101% agree with you in principle, but in this particular case my experience is wildly different. As soon as I scrolled, the navigation got out of the way, and all I have is text - with author's decision to keep large wide white margins. (Vanilla Chrome on Windows - no extensions/plugins/blockers, no reader mode, etc)

https://imgur.com/5DOqvj1

Re: Your Android Phone Is a Security Key

#36

Post by henryfjordan »

krzyk wrote: post #28
mattjack wrote: post #21

Earlier quoted context omitted.

It won't--so you'd have to use the backup methods they made you set up, like SMS codes, Authenticator, printable backup codes, etc.

SMS and authenticator won't work on a dead phone either, so you are left with keeping a paper with backup codes.

Or a second key.

What happens when your first and only Yubikey gets dropped in a puddle? You're also back to paper and backup codes.

Re: Your Android Phone Is a Security Key

#37

Post by ksec »

NikolaNovak wrote: post #35
ksec wrote: post #30

Off topic: This is the state of web we are in, and this is coming from Google. [1] I have literally 20% of the screen displaying useful information. The others are all useless navigation or related crap. Just seeing it nearly got me to puke. It is one those problem in general where the web page is responsive and mobile first. [1] https://ibb.co/fCfmW6h

I fully 101% agree with you in principle, but in this particular case my experience is wildly different. As soon as I scrolled, the navigation got out of the way, and all I have is text - with author's decision to keep large wide white margins. (Vanilla Chrome on Windows - no extensions/plugins/blockers, no reader mode, etc) https://imgur.com/5DOqvj1

Well in my case.

Hide Related Article at the bottom wont go unless I actually click it.

The gigantic three layer navigation bar appears when I scroll up just a little.

On Safari 12.1 macOS

Re: Your Android Phone Is a Security Key

#38

Post by eitland »

michaelmior wrote: post #26
mattjack wrote: post #14

They don't make this very obvious but this only works in Chrome. So you'll have to use SMS codes, the Authenticator app, or backup codes everywhere else. (edit: they explicitly say so when activating it but not as clearly in the docs)

> all you need is an Android 7.0+ phone and a Bluetooth-enabled Chrome OS, macOS X or Windows 10 computer with a Chrome browser

Heh, Microsoft seems better than Google to support Linux in new products now. VS Vode is amazing, as is dotnet core.

Who would have thought 5 years ago.

Re: Your Android Phone Is a Security Key

#40

Post by modwilliam »

ksec wrote: post #30

Off topic: This is the state of web we are in, and this is coming from Google. [1] I have literally 20% of the screen displaying useful information. The others are all useless navigation or related crap. Just seeing it nearly got me to puke. It is one those problem in general where the web page is responsive and mobile first. [1] https://ibb.co/fCfmW6h

Looks like you're zoomed in or have a larger default font size, so it's not fair to say this is the state of the web
Post reply on HN