News for hackers. Stuff that matters.

A comment on Google: Security Keys Neutralized Employee Phishing.

Re:Google: Security Keys Neutralized Employee Phishing by phillipseamore on Monday July 23, 2018 @11:27AM (#17593376)
I'd like to mention that I've been testing the Krypton app (iOS only for now) for U2F. You install Krypton on your iOS device, it creates keys that are only on the device. You then install the extension for Chrome. When U2F is requested they send the challenge to the iOS device which calculates the response and sends it back to the extension. App can be configured to require approval or always send response.

App also support SSH keys.

Works very well for me and the service is free. https://krypt.co/

[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by 4kevinking on Monday July 23, 2018 @11:57AM (#17593605)
Good to hear you're liking U2F on Krypton. Android support was released last week, and Firefox/Safari support is coming soon!
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by xena on Monday July 23, 2018 @04:28PM (#17595692)
I wish you just had the workstation download on the homepage again. I had to find your homebrew bottle GitHub repo to figure out how to install Krypton on my new MacBook.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by paulopontesm on Tuesday July 24, 2018 @10:29AM (#17601317)
Agree. The new page seems phishy. I double checked the domain and certificate before trusting the page at all. Other than that.. great product
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by 4kevinking on Monday July 23, 2018 @04:56PM (#17595900)
Sorry for the inconvenience. You can also find the install instructions on the help screen of the app.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by krrrh on Monday July 23, 2018 @11:50AM (#17593558)
When I started using Krypton for ssh and code-signing last year, the first thing I did was ask the Krypton team on twitter if they were going to add U2F. Glad to hear it’s in beta! It’s rarer these days to subsume another device into our phones’ functionality, but it’s still a good feeling.
[ Parent | on HN ]