Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

yubi.co

Post reply on HN
Print view View original

41–45 of 45 posts

Re: YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

#41

Post by nickik »

seanp2k2 wrote: post #36
lima wrote: post #35

Earlier quoted context omitted.

Those are considered deprecated by now. The most important issue with those devices is that they're not secure against phishing. If you accidentally input your credentials and PIN code in a phishing site, it's game over. With FIDO tokens, this is impossible - authentication is challenge-response based and tied to the encrypted channel. Your device contains a private key which is used to authenticate. This requires tw…

What makes it impossible for a phishing site to mimic the challenge?

Thata the clever bit about FIDO. Part of what unlocks the private key for signing the challenge is somehing called AppId. AppId is automatically captured by your webbrowser (weborigin standard) and passed along. So the authenticator only unlooks if you are on the correct website.

A further feature is that you can make the ssl tunnel id part of this as well, that makes it even better.

This is how both UAF and U2F work.

Re: YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

#42

Post by nickik »

Buge wrote: post #19
hannibalhorn wrote: post #2

And apparently with macOS Sierra it's possible to once again use a Yubikey to configure login on a Mac. I'd missed that news, will have to go dig mine out of the drawer!

It's interesting what direction Yubico will go with the new Macs having no USB A port.

The have already written a blogpost about USBC and they are ready to switch when there is more demand.

Re: YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

#43

Post by nickik »

luma wrote: post #34
homakov wrote: post #28

Earlier quoted context omitted.

I'll extend the question: from what does it protect at all? (Answer: nothing, FIDO keys is a hype)

Can you expound on that a bit? It seems like a reasonable solution for a hardware security token. What don't you like about FIDO keys?

Dont ask this troll, this article is not even about fido.

Re: YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

#44

Post by homakov »

luma wrote: post #34
homakov wrote: post #28

Earlier quoted context omitted.

I'll extend the question: from what does it protect at all? (Answer: nothing, FIDO keys is a hype)

Can you expound on that a bit? It seems like a reasonable solution for a hardware security token. What don't you like about FIDO keys?

From what attack scenario does it protect (there's a few, low possibility) providing real handicap in usability?

I believe pressing on a button not confirming any transaction details/message is quite a useless action

Re: YubiKey for Windows Hello – Protect your Windows 10 login with your YubiKey

#45

Post by homakov »

nickik wrote: post #43
luma wrote: post #34

Earlier quoted context omitted.

Can you expound on that a bit? It seems like a reasonable solution for a hardware security token. What don't you like about FIDO keys?

Dont ask this troll, this article is not even about fido.

I'm not a troll, I have an article on this https://sakurity.com/blog/2015/07/18/2fa.html
Post reply on HN