News for hackers. Stuff that matters.

A comment on Google: Security Keys Neutralized Employee Phishing. Parent comment

Re:Google: Security Keys Neutralized Employee Phishing by palisade on Monday July 23, 2018 @02:58PM (#17594954)
Potentially difficult if you were relying on a unique product like yubikey which doesn't have a 1 to 1 competitor in the industry at the moment.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by vel0city on Monday July 23, 2018 @09:42PM (#17597492)
There are many makers of FIDO U2F complaint hardware devices these days.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by palisade on Monday July 23, 2018 @10:49PM (#17597749)
The original poster was discussing the OpenPGP feature. The U2F feature of YubiKey wasn't compromised by the vulnerability.

The vulnerability is real and still exists. There was even someone in this HN thread that was planning to use an old key fob Arstechnica sent him, specifically for the OpenPGP feature.

I should have split my backup and vulnerability comments into two, because they've sparked two unrelated debates. It started out as such a simple comment! :)

[ Parent | on HN ]