News for hackers. Stuff that matters.
Re:Google: Security Keys Neutralized Employee Phishing by Steltek on Monday July 23, 2018 @11:50AM (#17593559)
On Android, you have plenty of options and they all work. Specifically, my Neo key works with NFC and my YK4 works with USB OTG (both original flavor and USB-C).

Apple limits the capabilities of Yubikeys so much that it's best to summarize it as "Doesn't work". It's more of Apple's anti-competitive restrictions that seem to go unnoticed by most people because they have a shiny UI.

Re:Google: Security Keys Neutralized Employee Phishing by adrian_mrd on Monday July 23, 2018 @12:11PM (#17593681)
Thanks for that info.

So, then, if Apple wanted to adopt a similar solution to Google - i.e. for their own enterprise security, as opposed to for their customers - could they use one of the Yubikey NFC options, or, would they have to ‘create’ a Bluetooth-specific device?

Maybe the long-rumoured Steve Jobs ring could take the form factor?!

And from an Apple customer perspective, is there a valid argument to be made that iOS devices can be, or are currently, less secure than Android counterparts because of the current lack of Yubikey / U2F options?

Re:Google: Security Keys Neutralized Employee Phishing by PascLeRasc on Monday July 23, 2018 @02:04PM (#17594510)
The Yubikey NEO recently supports iPhone 7 and up: https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-...
Re:Google: Security Keys Neutralized Employee Phishing by adrian_mrd on Monday July 23, 2018 @03:16PM (#17595120)
With some limitations, at least in iOS 11:

“Besides the fact that the NFC Reader interface can only be fired up from an app, Core NFC [in iOS 11] does not allow for write operations that are required for authentication protocols like FIDO U2F. ...

However, because NFC tag reading is supported, it allows developers to build apps, including consumer facing or purpose-built enterprise applications, with one-time passcode (OTP) support.”

Which is what ‘smiley1437’ and others have effectively stated in other parts of this thread.

edit: added last sentence