News for hackers. Stuff that matters.

A comment on What I Wish I Knew About U2F and Other Hardware MFA Protocols. Parent comment

Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by bsder on Friday April 16, 2021 @09:20PM (#26840822)
> Additionally as long as you've got your secret, you can reinitialize your Nano S (or another one) as a new U2F device and there's no need to reset your U2F credentials on the site as the newly initialized device shall work exactly as if it was the old one.

But isn't it the whole point that these devices never let you have the secret?

[ Parent | on HN ]
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by OJFord on Saturday April 17, 2021 @04:33AM (#26842615)
The device GP is talking about is a cryptocurrency 'hardware wallet', so no.

You may have thought (as I did at first) they meant a Yubikey; there is after all also a model called 'Nano', but not, I think, 'Nano S'.

[ Parent | on HN ]
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by PeterisP on Sunday April 18, 2021 @07:06PM (#26857389)
The devices don't let you extract the secret, however, they generally can be set up with a secret that you know.
[ Parent | on HN ]