YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by donarb on Tuesday May 22, 2018 @10:27AM (#17126120)

Google Authenticator is not a password storage app. It produces time-based hashes that expire every 60 seconds.

https://en.wikipedia.org/wiki/Time-based_One-time_Password_a...

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by monocasa on Tuesday May 22, 2018 @12:15PM (#17127038)

Google authenticator generates those hashes from a plaintext key stored on device in a SQLite database. If you can read /data, then you can generate any hashes that Google Authenticator can.

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by RKearney on Tuesday May 22, 2018 @10:44AM (#17126222)

OP never claimed that it was. They were discussing the second factor in two-factor authentication workflows. Google Authenticator is exactly that, as you pointed out.

[ Parent | on HN ]