News for hackers. Stuff that matters.

A comment on YubiKey 5 Series with New NFC and FIDO2 Passwordless Features. Parent comment

Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by kasey_junk on Monday September 24, 2018 @08:48AM (#18057213)
Github and google support u2f. If you are a gmail user you should get a u2f device to protect your email.

That said the cheaper yubi do this as well. I use my yubi 4 for securing my ssh key as well though this is a) a pain & b) likely theater.

[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by village-idiot on Monday September 24, 2018 @08:50AM (#18057225)
I use an app based 2FA for that.

Maybe I’ll look into a YubiKey though. My problem is that I’m halfway in my own personal transition from USB A to USB C

[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by Latty on Monday September 24, 2018 @10:48AM (#18058133)
App based 2FA is still more vulnerable to phishing than a U2F key, because it relies on the user to check they are entering the code into the right website.

It's also faster and easier (no pulling out your phone, getting a code, typing it in, just touch the key).

Plus, the keys have other features (GPG keys, etc...) which can be useful.

[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by village-idiot on Wednesday September 26, 2018 @06:23PM (#18080750)
Ah, I didn’t know that u2F was even more phish-proof. Good to know!
[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by martinwww on Monday September 24, 2018 @10:18AM (#18057842)
I wish you successful personal transition, why you skipped USB B ?
[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by village-idiot on Wednesday September 26, 2018 @06:21PM (#18080735)
Because host machines don’t have USB B connectors, you typically only see them on hubs and printers.
[ Parent | on HN ]