YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by zaroth on Tuesday May 22, 2018 @12:22PM (#17127102)

In my eyes, the Yubikey is a bespoke toy compared to the latest-gen iPhone Secure Element.

Apple just has a lot more riding on their chip, and since they first introduced a secure element back in 2014 have spent perhaps 2 orders of magnitude more dollars on security R&D than Yubico ($4mm angel round in 2007, $30mm raised in 2017)

Apple’s secure element is in, what, more than a billion devices, and powers how many billions in Apple Pay? Yubikey by comparison ships devices that mostly nerds pile in their sock drawer with those old USB sticks they don’t use anymore.

[ Parent | on HN ]

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by azinman2 on Tuesday May 22, 2018 @01:06PM (#17127487)

But are there fundamental reasons why yubikey isn’t good? The amount of money spent doesn’t mean yubikey isn’t good, and they’re trying to accomplish different things (yubikey doesn’t have an OS running Facebook on it that could be used to attack itself, nor does it try to authenticate its secrets beyond a button press).

Note Google uses Yubikey to authenticate it’s employees into their laptops — hardly just nerds piling in their sock drawer.

[ Parent | on HN ]