News for hackers. Stuff that matters.

A comment on Chrome lets hackers phish even 'Unphishable' Yubikey users. Parent comment

Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by phyzome on Friday March 02, 2018 @06:41PM (#16506766)
Nonsense. It works fine on Github, Fastmail, Gandi... it doesn't work on Google because Google uses a different spec. That bug is about making Firefox compatible with the variation that Chrome/Google uses.
[ Parent | on HN ]
Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by uiri on Friday March 02, 2018 @10:39PM (#16507709)
That bug mentions that Facebook is also broken.

I am kind of surprised that the sites you mention can implement the spec correctly but Facebook and Google can't.

[ Parent | on HN ]
Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by phyzome on Tuesday March 13, 2018 @12:36PM (#16577441)
Google is notorious for not following spec.

In this case, though, what happened is that Google implemented a different, earlier version of the spec than most everyone else. Mozilla is busy implementing that spec as well to bridge the gap.

[ Parent | on HN ]
Re:Chrome lets hackers phish even 'Unphishable' Yubikey users by Dylan16807 on Saturday March 03, 2018 @12:47PM (#16510463)
Google's CardDAV server isn't standards compliant (2014) https://news.ycombinator.com/item?id=16412730

I'm not surprised.

[ Parent | on HN ]