Beyond Passwords: 2FA, U2F and Google Advanced Protection

Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection by xaduha on Thursday November 15, 2018 @08:18AM (#18458995)

Smartcards aren't dead, they are all around us in sim cards and credit cards.

> They died when everybody ditched Java applets for web.

How's that relevant? Are you saying no one uses Java anymore?

[ Parent | on HN ]

Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection by IloveHN84 on Thursday November 15, 2018 @02:37PM (#18462512)

Well, Java for frontend / client side not anymore, since Java applets are insecure and can be exploited easily.

[ Parent | on HN ]

Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection by xaduha on Thursday November 15, 2018 @03:44PM (#18463108)

Java applets for browsers and Javacards have nothing in common except the name and the language.

[ Parent | on HN ]

Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection by Technetium_Hat on Thursday November 15, 2018 @09:20AM (#18459373)

Many smart cards use an extremely minimal version of java, so I imagine that java applets were able to interact with them more easily.

[ Parent | on HN ]

Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection by xaduha on Thursday November 15, 2018 @09:29AM (#18459441)

I'm not saying that writing for Javacards is easy, but that's not the problem here. There is plenty of software written already

https://github.com/EnigmaBridge/javacard-curated-list

It's just didn't catch on, there's no thriving community around it. You have the software, you have the hardware (search for JCOP21 or JCOP3 on Aliexpress), but no users.

[ Parent | on HN ]