News for hackers. Stuff that matters.

A comment on Chrome lets hackers phish even 'Unphishable' Yubikey users. Parent comment

Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by heroprotagonist on Friday March 02, 2018 @05:44PM (#16506452)
Considering your use cases, why not simply require an extra step in the browser to enable it instead of turning it on for all users?

EG, take a few seconds to turn on a flag in configuration, or add a plugin.

[ Parent | on HN ]
Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by X-Cubed on Friday March 02, 2018 @10:01PM (#16507607)
There is a permission prompt that appears, websites can't use the WebUSB functionality until you allow them too.
[ Parent | on HN ]