News for hackers. Stuff that matters.

A comment on GitHub Security Update: Reused Password Attack. Parent comment

Re:GitHub Security Update: Reused Password Attack by vulpino on Thursday June 16, 2016 @12:04AM (#11913892)
Dropbox does too! Unfortunately, those are the only sites supporting U2F I know of at the moment.
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by jonafato on Thursday June 16, 2016 @01:20AM (#11914170)
http://www.dongleauth.info/ maintains a list of sites supporting U2F devices. There aren't many yet, but it looks like a Wordpress plugin exists that may end up in core. There are also a handful of additional sites listed in issues and pull requests on the site's GitHub page (https://github.com/Nitrokey/dongleauth).

(I'm not affiliated with the site, I just check it periodically and thought it might be of use here.)

[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by bojo on Thursday June 16, 2016 @01:20AM (#11914171)
Bitbucket as well.
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by colemickens on Thursday June 16, 2016 @02:38AM (#11914427)
That's new! Took more tries than normal to register, but that's great. They took so long to roll out even TOTP based auth, I figured it would be ages before seeing U2F.
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by k33l0r on Thursday June 16, 2016 @02:19AM (#11914363)
Google also supports U2F
[ Parent | on HN ]