Live data from Hacker News

Your Android Phone Is a Security Key

blog.google

141–144 of 144 posts

Re: Your Android Phone Is a Security Key

#141

Your yubikey isn't owned by an evil megacorp. Use a damn yubikey; they're practically free and don't monetize their users.

As someone who can't currently afford the two Yubikeys needed to finish securing their internal startup services...please think for just a second before you say things.

I'd have sent you one if you weren't such a dick. Even though your statement is not remotely believable.

Re: Your Android Phone Is a Security Key

#142

Earlier quoted context omitted.

As someone who can't currently afford the two Yubikeys needed to finish securing their internal startup services...please think for just a second before you say things.

I'd have sent you one if you weren't such a dick. Even though your statement is not remotely believable.

I was slightly a dick because I didn't want anyone to offer - believe all of these statements or don't.

Re: Your Android Phone Is a Security Key

#143

Earlier quoted context omitted.

I'd have sent you one if you weren't such a dick. Even though your statement is not remotely believable.

I was slightly a dick because I didn't want anyone to offer - believe all of these statements or don't.

If you can't afford $20 for a yubikey, but have time to post snarky self-defeating comments on HN, you might consider why you don't have the $20.

Re: Your Android Phone Is a Security Key

#144
post #130

Here in Iceland, there's a security key embedded in your SIM card that everybody uses as their 2FA solution. It's triggered via a GSM message to your phone, identifies what the authorization is for, and lets you enter the key's PIN code to accept. The whole thing (except the UI) is isolated from the phone's OS so that even if your phone gets lost or compromised nobody else can auth as you.

This is why that's not great: https://www.schneier.com/blog/archives/2015/02/nsagchq_hacks...
Post reply on HN