News for hackers. Stuff that matters.

A comment on GitHub Security Update: Reused Password Attack. Parent comment

Re:GitHub Security Update: Reused Password Attack by pibefision on Thursday June 16, 2016 @03:50AM (#11914654)
Why U2F is betthern than using an Authenticator?
[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by 8_hours_ago on Thursday June 16, 2016 @01:25PM (#11917543)
Here's a brief comparison between OTP (Authenticator) and U2F: https://www.yubico.com/2016/02/otp-vs-u2f-strong-to-stronger...

One big advantage of U2P is protection against phishing and mitm attacks, which OTP is vulnerable to. There is more information here: https://developers.yubico.com/U2F/Protocol_details/Overview....

[ Parent | on HN ]
Re:GitHub Security Update: Reused Password Attack by pfg on Thursday June 16, 2016 @04:37AM (#11914795)
U2F is immune against phishing.
[ Parent | on HN ]