YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by pilif on Tuesday May 22, 2018 @11:37AM (#17126698)

I don't know about the OP, but for me the reason is that it's made by a company with a much bigger profile than yubico

This means that it's under much higher scrutiny by the public. Due to that big profile I also expect security issues to be fixed quickly as Apple has much more reputation (and money) to lose than Yubico.

Finding exploits in the iPhone's secure element gains you much more fame than finding exploits in the Yubikey.

And finally, Apple has come out very publicly against aiding law enforcement and has a much bigger war chest to fight requests by law enforcement.

Yubico has neither.

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by sweden on Tuesday May 22, 2018 @12:01PM (#17126923)

But an Yubikey is a passive and isolated device: it doesn't turn itself on, it doesn't run any apps, it doesn't connect to the internet. And if it gets compromised (stolen or exploited), it's cheap enough to throw it away and to replace it with a new and improved version without any hassle.

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by zaroth on Tuesday May 22, 2018 @12:27PM (#17127157)

Stealing a Yubikey gives you immediate access to the 2nd factor, and I might not notice right away.

Stealing my iPhone gives you almost zero chance of accessing the second factor, I would notice a lot quicker, and I could revoke access (remote wipe) with a single click versus having to re-enroll a new 2FA at every single site individually.

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by YR372zm87 on Tuesday May 22, 2018 @01:46PM (#17127900)

You can password protect the Yubikey. That's how mine is setup. Adds an extra step, but I don't worry about losing it.

[ Parent | on HN ]