News for hackers. Stuff that matters.

A comment on Chrome lets hackers phish even 'Unphishable' Yubikey users. Parent comment

Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by ravenstine on Friday March 02, 2018 @12:21PM (#16503584)
I didn't even realize web USB was a thing now. I remember it being talked about, but I must have missed the HN conversation when Chrome implemented it.

So does Chrome ask for permission to allow USB access? Or maybe there's something about this I'm not getting.

[ Parent | on HN ]
Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by pfg on Friday March 02, 2018 @12:26PM (#16503629)
There is a permission prompt, but it's fairly easy to convince users to accept it during a login attempt when they're expecting their USB U2F device to be used.
[ Parent | on HN ]