is this the result of the partnership with yubikey?
Google is supporting the FIDO U2F standard just like Yubikey now.
Strengthening 2-Step Verification with Security Key
11–20 of 150 posts
Re: Strengthening 2-Step Verification with Security Key
#12 Security Key does not work on browsers other than Chrome.
Doesn't mean it can't be useful in some settings, though.
Re: Strengthening 2-Step Verification with Security Key
#13With more interaction online moving to smartphones and tablets, what do we do instead of USB hardware keys like these?
Probably a similar device but with some sort of low-power NFC transponder rather than a physical connection.
Re: Strengthening 2-Step Verification with Security Key
#14I don't get this, what about malware pretending to be a browser? Is there a protection against this in protocol
If there's malware on your computer, it could just as easily keylog your password and one-time code the next time you try to log in to google, silently drop those packets on the floor (so you think there was just a connection issue), and then use your credentials to get access to your account.
If there's malware on your computer running as you, with access to things like USB devices, it becomes significantly harder (if not impossible) to do anything security critical on it.
Re: Strengthening 2-Step Verification with Security Key
#15This seems to me to be a bit of a narrow market. At the upper end of secure machines, USB ports will be physically disabled. And if you're not hyper security conscious, you're not going to bother with a physical key.
So with this, you need to be somewhat paranoid, but not totally paranoid.
Re: Strengthening 2-Step Verification with Security Key
#16With more interaction online moving to smartphones and tablets, what do we do instead of USB hardware keys like these?
Probably a similar device but with some sort of low-power NFC transponder rather than a physical connection.
I've never used it but, https://www.yubico.com/products/yubikey-hardware/yubikey-neo... seems to fit the bill.
Re: Strengthening 2-Step Verification with Security Key
#17To me, USB seems more and more like a security problem in general. Operating systems trust USB devices implicitly, despite the fact that every single one is a little computer of its own that can be compromised.
2-factor auth via a mobile device airgaps the devices from one another, which seems like a great idea for security. If both factors are directly connected by a trust-by-default data channel, it seems at least possible that one exploit could affect both factors.
Re: Strengthening 2-Step Verification with Security Key
#18With more interaction online moving to smartphones and tablets, what do we do instead of USB hardware keys like these?
Authy allows Bluetooth communication to get 2FA codes from your phone onto your Mac.
Re: Strengthening 2-Step Verification with Security Key
#19With more interaction online moving to smartphones and tablets, what do we do instead of USB hardware keys like these?
Wearables with BTLE.
Re: Strengthening 2-Step Verification with Security Key
#20This is very interesting. Is this Yubikey-compatible? http://www.amazon.com/Plug-up-International-U2F-SK-01-FIDO-S... Can I buy one of these to use with SSH auth/password programs/Chrome?
It should be: https://fidoalliance.org/adoption/video/yubico-fido-alliance... https://www.yubico.com/products/yubikey-hardware/fido-u2f-se...