Use this link to force-redirect to the US product page: https://store.google.com/us/product/titan_security_key_kit?h...
(mods, can we please change the story URL to the above one? It should show the correct item globally and thus leaving less people confused.)","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:26:31.000Z","created_at_i":1535628391,"id":17875769,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"I only see Chromecast and Chromecast Audio on this page.","title":null,"type":"comment","url":null},{"author":"throwawaymath","children":[{"author":"dgacmu","children":[],"created_at":"2018-08-30T11:31:14.000Z","created_at_i":1535628674,"id":17875801,"options":[],"parent_id":17875778,"points":null,"story_id":17875658,"text":"The Bluetooth one works for iOS. I'm not sure about connecting a USB one in some way - haven't tried.","title":null,"type":"comment","url":null},{"author":"Ded7xSEoPKYNsDd","children":[{"author":"__float","children":[],"created_at":"2018-08-30T12:43:09.000Z","created_at_i":1535632989,"id":17876200,"options":[],"parent_id":17876115,"points":null,"story_id":17875658,"text":"I asked at DEF CON about these, but they said they were not the same as the Titan. Hardware looks to be the same, but they may not have the Titan firmware, but rather the original Feitian one. I...don't actually know how to verify that claim though.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:29:38.000Z","created_at_i":1535632178,"id":17876115,"options":[],"parent_id":17875778,"points":null,"story_id":17875658,"text":"(I got these at a Google thing at DEF CON.) Both work with Firefox on Linux, without any Google software. Haven't yet found non-Google software on Android (Lineage) that can talk to them.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:27:56.000Z","created_at_i":1535628476,"id":17875778,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Am I correct in my understanding that this will only work for Google devices? It states that, but at least for the physical U2F key I don\u2019t see why that wouldn\u2019t also work on a non-Google device.
EDIT: Revisting, it states anything running Google Chrome should also work. So I guess macOS should be fine, what about iOS?","title":null,"type":"comment","url":null},{"author":"grepthisab","children":[],"created_at":"2018-08-30T11:29:55.000Z","created_at_i":1535628595,"id":17875789,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Pretty cool, I like that it comes with two keys at the start so you have a backup, unlike Yubi where I have to buy two before I can even get started in earnest. Still living the dongle life though, but it appears to come with its own usb a -> c adapter at least.","title":null,"type":"comment","url":null},{"author":"h8trswana8","children":[{"author":"craftyguy","children":[],"created_at":"2018-08-30T15:56:26.000Z","created_at_i":1535644586,"id":17877727,"options":[],"parent_id":17875796,"points":null,"story_id":17875658,"text":"TBF, it does have 'titan' in the name.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:30:37.000Z","created_at_i":1535628637,"id":17875796,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"It\u2019s so big. Couldn\u2019t they have come up with a more subtle form factor?","title":null,"type":"comment","url":null},{"author":"scrrr","children":[{"author":"matharmin","children":[{"author":"scrrr","children":[],"created_at":"2018-08-30T11:49:39.000Z","created_at_i":1535629779,"id":17875884,"options":[],"parent_id":17875855,"points":null,"story_id":17875658,"text":"Good reasons, thanks!","title":null,"type":"comment","url":null},{"author":"m_eiman","children":[{"author":"tialaramex","children":[],"created_at":"2018-08-30T14:07:35.000Z","created_at_i":1535638055,"id":17876806,"options":[],"parent_id":17875992,"points":null,"story_id":17875658,"text":"AIUI Krypton is basically doing the same thing as these FIDO2 Security Keys, but their software substitutes an app on your Phone for the Security Key. So a web site offering WebAuthn can't tell the difference (unless you allow it to interrogate the "Security Key" to ask who made it, which you probably shouldn't)
I personally would rather have Security Keys, but a solution like Krypton is definitely easier for a lot of users and obviously the price differential is hard to argue with.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:12:01.000Z","created_at_i":1535631121,"id":17875992,"options":[],"parent_id":17875855,"points":null,"story_id":17875658,"text":"There are apps that also validate the source and can automatically sign you in (or require a button press), e.g. https://www.kryptco.com
Seems like it might be useful, but haven't had the time to try it out yet.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:43:48.000Z","created_at_i":1535629428,"id":17875855,"options":[],"parent_id":17875828,"points":null,"story_id":17875658,"text":"Similar use case (2FA), but different implementation.
Instead of typing in a code, you press a button. It also protects against phishing by validating the URL of the site you're authenticating on (with a code-based 2FA you can still enter your code on a phishing site, which then forwards it to the real one).","title":null,"type":"comment","url":null},{"author":"ZiiS","children":[],"created_at":"2018-08-30T11:51:10.000Z","created_at_i":1535629870,"id":17875891,"options":[],"parent_id":17875828,"points":null,"story_id":17875658,"text":"An app has a much larger attack surface (for instance from malware on the phone).\nTOTP has to use short easy to enter codes (six digit numbers), Titan is doing a full handshake using modern cryptography with sensable key lengths.\nIn many use cases pushing the button on the key is quicker/easier then using the app.","title":null,"type":"comment","url":null},{"author":"pg_bot","children":[],"created_at":"2018-08-30T12:10:40.000Z","created_at_i":1535631040,"id":17875987,"options":[],"parent_id":17875828,"points":null,"story_id":17875658,"text":"While both handle two factor authentication, Authy only assists with time based one time passwords (TOTP) which still leaves the end user open to phishing. These security keys are meant to be used with universal second factor (U2F) which prevents phishing entirely.
https://en.wikipedia.org/wiki/Time-based_One-time_Password_a...
https://en.wikipedia.org/wiki/Universal_2nd_Factor","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:38:43.000Z","created_at_i":1535629123,"id":17875828,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Isn't this the same as a code app like Authy? Why carry the extra dongle?","title":null,"type":"comment","url":null},{"author":"Someone1234","children":[{"author":"rahimnathwani","children":[{"author":"Someone1234","children":[{"author":"rahimnathwani","children":[],"created_at":"2018-08-30T12:21:56.000Z","created_at_i":1535631716,"id":17876067,"options":[],"parent_id":17875966,"points":null,"story_id":17875658,"text":"Yes. Sorry I should have made it clear I was addressing the second part of your comment, i.e. a reason to pay $50 for hardware you can get for $42 elsewhere","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:06:01.000Z","created_at_i":1535630761,"id":17875966,"options":[],"parent_id":17875925,"points":null,"story_id":17875658,"text":"That won't resolve many of the negative reviews of the MultiPass key, since they're complaints over the physical design and usage.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:55:17.000Z","created_at_i":1535630117,"id":17875925,"options":[],"parent_id":17875867,"points":null,"story_id":17875658,"text":""Firmware for Titan Security Keys is engineered by Google, to verify the key\u2019s integrity."","title":null,"type":"comment","url":null},{"author":"amelius","children":[{"author":"frockington","children":[{"author":"felix_nagaand","children":[{"author":"BLanen","children":[{"author":"dawnerd","children":[{"author":"BLanen","children":[],"created_at":"2018-08-30T15:54:10.000Z","created_at_i":1535644450,"id":17877705,"options":[],"parent_id":17877493,"points":null,"story_id":17875658,"text":"That's good. Prevents your customers getting fake products if you, as a seller, don't intent to. (Excluding warehousing mistakes, etc).
This way a reputation system is more effective.","title":null,"type":"comment","url":null},{"author":"_ea1k","children":[],"created_at":"2018-08-30T17:57:45.000Z","created_at_i":1535651865,"id":17879008,"options":[],"parent_id":17877493,"points":null,"story_id":17875658,"text":"I wouldn't go that far. There is really nothing wrong with offering fulfillment services.
The comingling of products in the binning process isn't good, though.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:27:07.000Z","created_at_i":1535642827,"id":17877493,"options":[],"parent_id":17877011,"points":null,"story_id":17875658,"text":"Doubt it. Third party seller stuff looks to be shipped by that seller. The way it should be.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T14:30:33.000Z","created_at_i":1535639433,"id":17877011,"options":[],"parent_id":17876494,"points":null,"story_id":17875658,"text":"Do they also mix inventory geographically?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:28:49.000Z","created_at_i":1535635729,"id":17876494,"options":[],"parent_id":17876343,"points":null,"story_id":17875658,"text":"They allow third party sellers so if it's not a problem now it will become one.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:08:36.000Z","created_at_i":1535634516,"id":17876343,"options":[],"parent_id":17876029,"points":null,"story_id":17875658,"text":"I assume everything on Amazon is a counterfeit and plan accordingly. Have you heard anything about Walmart? They have free two day shipping and I haven't heard any counterfeit horror stories (yet)","title":null,"type":"comment","url":null},{"author":"Fnoord","children":[{"author":"jonahhorowitz","children":[],"created_at":"2018-08-30T19:45:04.000Z","created_at_i":1535658304,"id":17880080,"options":[],"parent_id":17879336,"points":null,"story_id":17875658,"text":"The Feitian works just fine with the latest Firefox builds. The bluetooth functionality is great if you have an iPhone.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T18:28:06.000Z","created_at_i":1535653686,"id":17879336,"options":[],"parent_id":17876029,"points":null,"story_id":17875658,"text":"That does not make sense in this case.
The key is made by a company called Feitian (Feitian Technologies Co., Ltd), on Amazon. That's the original manufacturer selling directly on Amazon [1]. That's the only one available. Its about as authentic as you can get on Amazon. I'd rather buy it from Gearbest or Banggood but they don't sell this. And Google just sells it rebranded.
Though I won't buy this (I could use the BLE part of it), since for one it doesn't seem to be build strongly (overcome-able but still), it only seems to work with Chrome according to reviews (I use Firefox), and I'm unsure if Bluetooth is secure for this method, nor reliable. NFC should be fine, since its much closer range, and I have a YubiKey NEO but my phone doesn't have NFC, unfortunately.
[1] https://www.amazon.com/Feitian-MultiPass-FIDO-Security-Key/d...","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:17:19.000Z","created_at_i":1535631439,"id":17876029,"options":[],"parent_id":17875867,"points":null,"story_id":17875658,"text":"Given the recent amount of reports of counterfeiting on Amazon (not specifically this product), I'd buy my security keys elsewhere.","title":null,"type":"comment","url":null},{"author":"stephengillie","children":[],"created_at":"2018-08-30T12:58:45.000Z","created_at_i":1535633925,"id":17876279,"options":[],"parent_id":17875867,"points":null,"story_id":17875658,"text":"Feitan > Titan
It's only a syllable away.","title":null,"type":"comment","url":null},{"author":"mehrdada","children":[{"author":"Someone1234","children":[{"author":"mehrdada","children":[{"author":"opencl","children":[],"created_at":"2018-08-30T16:51:30.000Z","created_at_i":1535647890,"id":17878244,"options":[],"parent_id":17877587,"points":null,"story_id":17875658,"text":"Sure most security keys look vaguely similar but these are clearly completely identical physical designs. Why would you think they happened to make an extremely detailed clone of the Feitian hardware rather than simply buying it and flashing their in house firmware?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:39:30.000Z","created_at_i":1535643570,"id":17877587,"options":[],"parent_id":17877447,"points":null,"story_id":17875658,"text":"I read the doc. Seems to be something like a user guide for the Feitan product published a year ago. Never it mentions the hardware/firmware of Titan keys that Google sells today is theirs. Most security keys from various companies look alike.","title":null,"type":"comment","url":null},{"author":"joshuamorton","children":[{"author":"Someone1234","children":[{"author":"joshuamorton","children":[{"author":"dastbe","children":[],"created_at":"2018-08-30T18:44:23.000Z","created_at_i":1535654663,"id":17879527,"options":[],"parent_id":17878159,"points":null,"story_id":17875658,"text":"Rebadging is when you primarily change the branding of a product (and some customizable aspects of it). Sometimes these are white label products whose entire purpose is to be rebadged, other times it\u2019s another companies offering.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:42:35.000Z","created_at_i":1535647355,"id":17878159,"options":[],"parent_id":17877967,"points":null,"story_id":17875658,"text":"Yes, Google used to provide Feitan keys. That doesn't really address whether or not these are Feitan keys. (I'm also not sure what you mean by rebadged).","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:24:03.000Z","created_at_i":1535646243,"id":17877967,"options":[],"parent_id":17877597,"points":null,"story_id":17875658,"text":"Google provided identical Feitan keys for Advanced Protection as recently as a couple of months ago[0]. AP works with any FIDO key, but that isn't what we're discussing, we're discussing that these are re-badged Feitan keys. Which they most likely are.
[0] https://i.imgur.com/5EWh0jx.png","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:40:58.000Z","created_at_i":1535643658,"id":17877597,"options":[],"parent_id":17877447,"points":null,"story_id":17875658,"text":"(I work at Google).
While I don't know whether or not Feitan manufactures those keys, I believe the answer is that they don't. More importantly though, that article doesn't really provide any detail one way or the other. Advanced Protection works with any FIDO/U2F key. Feitan's keys are valid AP keys. Titan keys are valid AP keys. Yubico keys are valid AP keys.
That a key works with AP doesn't say anything about who made it, and that article just says that you can use Feitan's keys with advanced protection, not that they're Google's key manufacturer. In fact I think that article is from before Google announced the Titan keys, but I'm not 100% on that.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:21:33.000Z","created_at_i":1535642493,"id":17877447,"options":[],"parent_id":17877407,"points":null,"story_id":17875658,"text":"https://www.ftsafe.com/article/563.html","title":null,"type":"comment","url":null},{"author":"amingilani","children":[],"created_at":"2018-08-30T16:18:14.000Z","created_at_i":1535645894,"id":17877911,"options":[],"parent_id":17877407,"points":null,"story_id":17875658,"text":"As a person enrolled in Google's Advanced Protection Program, Google recommended that I use the Feitian Multipass Key upon sign up. I bought a few of those, and it looks exactly like the key in that picture. I'm looking at my Feitian right now, and I can promise you it's the same.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:16:49.000Z","created_at_i":1535642209,"id":17877407,"options":[],"parent_id":17875867,"points":null,"story_id":17875658,"text":"I don't think this is true. Titan seems to be an in-house project. Are you basing this assumption on anything but the exterior looks?","title":null,"type":"comment","url":null},{"author":"ecesena","children":[{"author":"ecesena","children":[],"created_at":"2018-08-30T17:46:10.000Z","created_at_i":1535651170,"id":17878880,"options":[],"parent_id":17877941,"points":null,"story_id":17875658,"text":"BTW, we're working on an open source FIDO2 security key, Solo.
We're having a kickstarter soon, and if you're interested you can join the waiting list at https://solokeys.com/","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:21:03.000Z","created_at_i":1535646063,"id":17877941,"options":[],"parent_id":17875867,"points":null,"story_id":17875658,"text":"I suspect these keys will be FIDO2, so even if they look the same, even Feitian might raise up its prices a little bit supporting the new standard. I don't know, just guessing.
Also, in Google's $50 there are also 2 cables usb-a2c and c2a. I guess they decided to go the way of the complete package with all you may need.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:45:38.000Z","created_at_i":1535629538,"id":17875867,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"The wireless key is the "Feitian MultiPass FIDO Security Key" I'd caution people to read the Amazon reviews (specifically people found it unreliable and it would break if dropped/roughly handled).
They both seem to be re-branded Feitian, which cost less ($25 + $17 = $42) when purchased under that brand from Amazon than the Google Titan moniker.","title":null,"type":"comment","url":null},{"author":"kennydude","children":[{"author":"dewey","children":[],"created_at":"2018-08-30T11:53:36.000Z","created_at_i":1535630016,"id":17875911,"options":[],"parent_id":17875885,"points":null,"story_id":17875658,"text":"It's a USB C Adapter","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:49:47.000Z","created_at_i":1535629787,"id":17875885,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Is that a dongle to use it on the surface-style-thing? Whyyyyyyy","title":null,"type":"comment","url":null},{"author":"therealmarv","children":[{"author":"fredley","children":[{"author":"jrockway","children":[{"author":"fredley","children":[],"created_at":"2018-08-30T13:46:33.000Z","created_at_i":1535636793,"id":17876641,"options":[],"parent_id":17876576,"points":null,"story_id":17875658,"text":"I'm not suggesting they should only produce a USB C variant, I'm suggesting that they produce a USB C variant.","title":null,"type":"comment","url":null},{"author":"psychometry","children":[],"created_at":"2018-08-30T15:59:42.000Z","created_at_i":1535644782,"id":17877745,"options":[],"parent_id":17876576,"points":null,"story_id":17875658,"text":"You should know that Apple moved to USB-C only for its Macbook line years ago.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:38:40.000Z","created_at_i":1535636320,"id":17876576,"options":[],"parent_id":17875910,"points":null,"story_id":17875658,"text":"I use a Mac at work. It has 0 USB Type C ports.
The only computer I own that has a USB Type C port is my homebuilt desktop, and it's on the back, and I don't think the Windows driver actually works.","title":null,"type":"comment","url":null},{"author":"mikelward","children":[],"created_at":"2018-08-30T18:37:28.000Z","created_at_i":1535654248,"id":17879446,"options":[],"parent_id":17875910,"points":null,"story_id":17875658,"text":"Most of the Google engineers I know use Chromebooks and Linux laptops. Most Chromebooks also only have USB C.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:53:01.000Z","created_at_i":1535629981,"id":17875910,"options":[],"parent_id":17875897,"points":null,"story_id":17875658,"text":"Can't see the page, but that there is not a USB C variant is bonkers. All Google engineers I know use mac devices.","title":null,"type":"comment","url":null},{"author":"desdiv","children":[],"created_at":"2018-08-30T12:14:08.000Z","created_at_i":1535631248,"id":17876006,"options":[],"parent_id":17875897,"points":null,"story_id":17875658,"text":"This link should work everywhere:
https://store.google.com/us/product/titan_security_key_kit?h...","title":null,"type":"comment","url":null},{"author":"ryukafalz","children":[{"author":"therealmarv","children":[{"author":"crgwbr","children":[{"author":"akavel","children":[{"author":"anilakar","children":[],"created_at":"2018-08-30T13:54:28.000Z","created_at_i":1535637268,"id":17876697,"options":[],"parent_id":17876574,"points":null,"story_id":17875658,"text":"The real reason is to prevent hooking up two dumb Type-A host side power supplies, as I pointed out in another post. A properly implemented Type-C device will not draw high currents without power negotiation. (I'm looking at you, Nintendo)","title":null,"type":"comment","url":null},{"author":"mbreese","children":[],"created_at":"2018-08-30T14:01:52.000Z","created_at_i":1535637712,"id":17876764,"options":[],"parent_id":17876574,"points":null,"story_id":17875658,"text":"Cable not adapter. IIRC a cable is okay but the adapter version is not. Like mentioned above/below, this is to prevent other USB-A things from causing problems. When you have a fixed cable, you remove a lot of the potential issues for misuse.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:38:36.000Z","created_at_i":1535636316,"id":17876574,"options":[],"parent_id":17876333,"points":null,"story_id":17875658,"text":"Uh? Then how do I plug my USB-C Samsung phone into an USB 2.0 A port on my laptop with an official Samsung cable found in the phone's box? Do I misunderstand something? Is the cable "illegal"?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:06:44.000Z","created_at_i":1535634404,"id":17876333,"options":[],"parent_id":17876257,"points":null,"story_id":17875658,"text":"Yes. Since USB-C devices can draw significantly more power than USB-A can supply, any USB-C device into USB-A port adapters are disallowed.","title":null,"type":"comment","url":null},{"author":"anilakar","children":[{"author":"tropo","children":[],"created_at":"2018-08-30T23:35:25.000Z","created_at_i":1535672125,"id":17881759,"options":[],"parent_id":17876385,"points":null,"story_id":17875658,"text":"This is pointless: Cables with USB-A on both ends have been available for many years.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:15:15.000Z","created_at_i":1535634915,"id":17876385,"options":[],"parent_id":17876257,"points":null,"story_id":17875658,"text":"Any adapter that has a USB-C receptacle is prohibited by the standard. This limitation exists to prevent hooking up two USB-A hosts with a USB-C cable.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:55:19.000Z","created_at_i":1535633719,"id":17876257,"options":[],"parent_id":17876074,"points":null,"story_id":17875658,"text":"interesting, first time I hear that. There are definitely such adapters available on the market. So they are all violating the spec?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:22:34.000Z","created_at_i":1535631754,"id":17876074,"options":[],"parent_id":17875897,"points":null,"story_id":17875658,"text":">why not going from usb-c to usb A with adapter than the other way round
To my knowledge there are no such adapters that are compliant with the USB spec.","title":null,"type":"comment","url":null},{"author":"psychometry","children":[],"created_at":"2018-08-30T15:58:59.000Z","created_at_i":1535644739,"id":17877740,"options":[],"parent_id":17875897,"points":null,"story_id":17875658,"text":"Or just sell both form factors. Even if they sold a USB-C version, though, it's not really useless for all of us poor schmucks who are using Macbooks with only two ports.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:51:25.000Z","created_at_i":1535629885,"id":17875897,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"1. why not going from usb-c to usb A with adapter than the other way round (this laptop photo looks so ugly with the usb-c->usb A adapter).
2. this link does not work outside US","title":null,"type":"comment","url":null},{"author":"Operyl","children":[{"author":"suprfsat","children":[],"created_at":"2018-08-30T12:04:01.000Z","created_at_i":1535630641,"id":17875960,"options":[],"parent_id":17875903,"points":null,"story_id":17875658,"text":"Each key is unique. You add both of them to your account.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:52:12.000Z","created_at_i":1535629932,"id":17875903,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Are both keys configured with the same underlying keys?
![https://i.imgur.com/5EWh0jx.png](\"https://i.imgur.com/5EWh0jx.png\"){kind=link}
Each key bundle comes with a physical USB security key and a Bluetooth security key\u2014one for your primary use and one for safe keeping.This is more like the Yubikey Security Key ($20): https://www.yubico.com/product/security-key-by-yubico/#secur...","title":null,"type":"comment","url":null},{"author":"spuz","children":[],"created_at":"2018-08-30T17:09:55.000Z","created_at_i":1535648995,"id":17878477,"options":[],"parent_id":17878139,"points":null,"story_id":17875658,"text":"If a bluetooth locator tag is only about \u00a33.34 [1], then a tag with an encryption chip should not be 10x the cost. Google has an incentive for their keys to become widespread and well adopted because people will associate their brand with "high security". It also actually helps Google if they don't have to deal with support requests from users who've had their accounts compromised.
[1]http://amzn.eu/d/bMowBkS","title":null,"type":"comment","url":null},{"author":"michaelt","children":[{"author":"watersb","children":[{"author":"michaelt","children":[],"created_at":"2018-08-30T22:04:01.000Z","created_at_i":1535666641,"id":17881216,"options":[],"parent_id":17881077,"points":null,"story_id":17875658,"text":"Oh, absolutely! I was responding to the statement "The actual hardware probably does not cost more than $10" which refers to the hardware specifically. The retail price would be higher than the hardware costs to cover software, support costs, returns, profit, shipping, credit card fees, and so on.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T21:45:46.000Z","created_at_i":1535665546,"id":17881077,"options":[],"parent_id":17879684,"points":null,"story_id":17875658,"text":"Bulk procurement, certification, software all affect cost, of course.
When a flaw was discovered in 4096-bit RSA ley generation, Yubico sent me replacements for all of my registered hardware tokens, no additional cost to me.
Good thing about a standard like U2F is reducing software and certification costs, and sure if you are clear to offer no post-sales support, then you should be able to get legitimate hardware for maybe $10.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T19:00:45.000Z","created_at_i":1535655645,"id":17879684,"options":[],"parent_id":17878139,"points":null,"story_id":17875658,"text":"The open-source U2F Zero claims ~$3 of parts and a ~$2 PCB [1] ordering a single unit. Making a large volume, that price is only going to come down.
Admittedly you'd have to pay for a plastic case, assembly costs, an envelope and stamps. But if I can get a 16GB flash drive for $8 with free shipping [2] the plastic case, assembly etc can't be that expensive!
[1] https://github.com/conorpp/u2f-zero\n[2] https://www.amazon.com/SanDisk-Cruzer-Low-Profile-Drive-SDCZ...","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:41:03.000Z","created_at_i":1535647263,"id":17878139,"options":[],"parent_id":17875922,"points":null,"story_id":17875658,"text":"Yubikeys are about the same cost:
https://www.yubico.com/product/yubikey-4-series/
What makes you think that the cost to produce the hardware is less than $10? And what reason would companies have to offer keys below cost?","title":null,"type":"comment","url":null},{"author":"sowbug","children":[{"author":"spuz","children":[],"created_at":"2018-08-30T17:16:04.000Z","created_at_i":1535649364,"id":17878551,"options":[],"parent_id":17878354,"points":null,"story_id":17875658,"text":"Yes of course, but the reason I mentioned the hardware cost is because that scales linearly with demand and software cost does not. The market for these kind of security devices is tiny right now but has the potential to be huge in the future. It would make sense for Google to sell their hardware at the lowest price they can in order to get people on board, after which network effects will ensure people stick with Google's services.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T17:01:48.000Z","created_at_i":1535648508,"id":17878354,"options":[],"parent_id":17875922,"points":null,"story_id":17875658,"text":"You are a web developer. Do you place any value on the cost of developing software?","title":null,"type":"comment","url":null},{"author":"jiveturkey","children":[{"author":"michaelt","children":[],"created_at":"2018-08-30T22:12:26.000Z","created_at_i":1535667146,"id":17881267,"options":[],"parent_id":17878893,"points":null,"story_id":17875658,"text":"Do you think the chips they put inside smart cards and SIM cards cost that much?","title":null,"type":"comment","url":null},{"author":"spuz","children":[],"created_at":"2018-08-30T22:13:47.000Z","created_at_i":1535667227,"id":17881274,"options":[],"parent_id":17878893,"points":null,"story_id":17875658,"text":"That's a lot! Where did you get that information?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T17:47:11.000Z","created_at_i":1535651231,"id":17878893,"options":[],"parent_id":17875922,"points":null,"story_id":17875658,"text":"the secure element alone is $5 at million quantity","title":null,"type":"comment","url":null},{"author":"kilo_bravo_3","children":[],"created_at":"2018-08-30T18:20:28.000Z","created_at_i":1535653228,"id":17879271,"options":[],"parent_id":17875922,"points":null,"story_id":17875658,"text":"When selling hardware, unless you are extraordinarily dominant in a very large and highly competitive market (television manufacturing), care only about marketshare (lower-tier smartphone manufacturers), or have another revenue stream (game console sellers) generally speaking you should target 3x BOM as your final retail price at an absolute minimum.
That's just for hunks of plastic. For complex (not a hunk of injected-molded plastic) devices with high non-BOM costs, you should be targeting 4x-5x at a minimum.
Also, the 3x-5x rule is for bare-bones lean operations. If you actually want to make money, compensate your employees well, practice good environmental stewardship in the construction of your products, use a manufacturer that treats its employees with respect, and have a healthy business where you are prepared to weather future changes in the market, your BOM costs should be LESS THAN 20% of the MSRP.
The model is also different if you are a Shenzhen ripoff factory dumping goods onto the market through Marketplace Sellers or Drop-Shippers. But that is not a model compatible with long-term prosperity or worker satisfaction.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:55:13.000Z","created_at_i":1535630113,"id":17875922,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"$50 seems very expensive. The actual hardware probably does not cost more than $10 and I can't see adoption of FIDO keys becoming widespread unless companies are willing to sell keys at or below cost.","title":null,"type":"comment","url":null},{"author":"locusm","children":[{"author":"ekingr","children":[{"author":"carc1n0gen","children":[{"author":"ekingr","children":[],"created_at":"2018-08-30T21:50:59.000Z","created_at_i":1535665859,"id":17881113,"options":[],"parent_id":17876255,"points":null,"story_id":17875658,"text":"Yes. Unfortunately it is still only OTP (vulnerable to fishing).
Let\u2019s hope that one day Apple opens full access to the NFC chip.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:55:11.000Z","created_at_i":1535633711,"id":17876255,"options":[],"parent_id":17876063,"points":null,"story_id":17875658,"text":"You may be interested in some yubikey iOS news that came out in may https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-...","title":null,"type":"comment","url":null},{"author":"stephengillie","children":[{"author":"mkj","children":[{"author":"numbsafari","children":[{"author":"SkyPuncher","children":[{"author":"stephengillie","children":[],"created_at":"2018-08-30T22:45:39.000Z","created_at_i":1535669139,"id":17881464,"options":[],"parent_id":17877520,"points":null,"story_id":17875658,"text":"How often do you work from a coffee shop? Ever wonder if anyone else in the shop has a minimized wardriver or "blue-driver" sniffing wireless connections? Or maybe their device is infected with a trojan, and a remote attacker is using their device to sniff a random network, which you happen to also be using.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:30:53.000Z","created_at_i":1535643053,"id":17877520,"options":[],"parent_id":17877088,"points":null,"story_id":17875658,"text":"Let's be real, how often does an attack like that happen?
Yes, a localized attack is still possible but you probably have a different set of worries if attacks are going so far as to be within a short distance of you.
These tools are about reducing the effectiveness remote attacks which are much more logical to carry out.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T14:38:31.000Z","created_at_i":1535639911,"id":17877088,"options":[],"parent_id":17876473,"points":null,"story_id":17875658,"text":"Or just sit down next to you for a few minutes until you use your device and then walk away?
I'd rather force them to smash my windows and doors rather than just give them what they want in passing.","title":null,"type":"comment","url":null},{"author":"jwr","children":[],"created_at":"2018-08-30T18:26:46.000Z","created_at_i":1535653606,"id":17879326,"options":[],"parent_id":17876473,"points":null,"story_id":17875658,"text":"Really? I would assume that the snoopers have access to another Bluetooth-enabled device nearby, such as pretty much any modern desktop or laptop computer.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:26:48.000Z","created_at_i":1535635608,"id":17876473,"options":[],"parent_id":17876293,"points":null,"story_id":17875658,"text":"The most likely snoopers are far far away, probably even a different timezone. If you have local burglars around they'll just break your windows and doors to get things anyway.
(And Bluetooth isn't that bad either?)","title":null,"type":"comment","url":null},{"author":"AdmiralAsshat","children":[{"author":"jrockway","children":[{"author":"dawnerd","children":[{"author":"jrockway","children":[],"created_at":"2018-08-30T15:39:41.000Z","created_at_i":1535643581,"id":17877589,"options":[],"parent_id":17877536,"points":null,"story_id":17875658,"text":"No, but why would you submit it? You are accidentally typing your credentials into Goggle.com or something, so you're only using them once.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T15:33:08.000Z","created_at_i":1535643188,"id":17877536,"options":[],"parent_id":17876613,"points":null,"story_id":17875658,"text":"Wouldn\u2019t it be invalidated if you submit it first?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:43:41.000Z","created_at_i":1535636621,"id":17876613,"options":[],"parent_id":17876545,"points":null,"story_id":17875658,"text":"They tend to last for a minute, but 5 seconds is more than enough time for the phishing site to submit it and have it work.
TOTP does not solve phishing in any meaningful way.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:36:23.000Z","created_at_i":1535636183,"id":17876545,"options":[],"parent_id":17876293,"points":null,"story_id":17875658,"text":"Wouldn't a pilfered TOTP code be useless after five seconds anyway?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:00:53.000Z","created_at_i":1535634053,"id":17876293,"options":[],"parent_id":17876063,"points":null,"story_id":17875658,"text":"How secure is Bluetooth - how do we know snoopers aren't stealing keys wirelessly?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:21:09.000Z","created_at_i":1535631669,"id":17876063,"options":[],"parent_id":17875933,"points":null,"story_id":17875658,"text":"The wireless one has Bluetooth - which is the only way to go on iOS for now.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:59:01.000Z","created_at_i":1535630341,"id":17875933,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"What does this offer over Yubi?","title":null,"type":"comment","url":null},{"author":"floor_","children":[],"created_at":"2018-08-30T12:02:47.000Z","created_at_i":1535630567,"id":17875951,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"The countdown starts and runs until some 12 year old breaks it wide open.","title":null,"type":"comment","url":null},{"author":"estomagordo","children":[],"created_at":"2018-08-30T12:15:20.000Z","created_at_i":1535631320,"id":17876014,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Is it sort of a ubikey?","title":null,"type":"comment","url":null},{"author":"amelius","children":[{"author":"mkj","children":[],"created_at":"2018-08-30T13:01:09.000Z","created_at_i":1535634069,"id":17876296,"options":[],"parent_id":17876039,"points":null,"story_id":17875658,"text":"Maybe in a few years time","title":null,"type":"comment","url":null},{"author":"moviuro","children":[],"created_at":"2018-08-30T13:07:40.000Z","created_at_i":1535634460,"id":17876340,"options":[],"parent_id":17876039,"points":null,"story_id":17875658,"text":"Haha, probably not[0].
[0] https://twofactorauth.org/#banking","title":null,"type":"comment","url":null},{"author":"Postosuchus","children":[],"created_at":"2018-08-30T13:17:14.000Z","created_at_i":1535635034,"id":17876403,"options":[],"parent_id":17876039,"points":null,"story_id":17875658,"text":"Not really if your bank doesn't support U2F and/or TOTP.","title":null,"type":"comment","url":null},{"author":"jrockway","children":[{"author":"the-peter","children":[],"created_at":"2018-08-30T19:10:33.000Z","created_at_i":1535656233,"id":17879775,"options":[],"parent_id":17876627,"points":null,"story_id":17875658,"text":"Vanguard? That's a laugh. There's a link on the login page "I don't have my device with me, send me an SMS instead". This cannot be disabled.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:45:10.000Z","created_at_i":1535636710,"id":17876627,"options":[],"parent_id":17876039,"points":null,"story_id":17875658,"text":"Vanguard lets you use a security key as a second factor. It is the only finance-related website I've ever seen that does so. (And it's probably because Google made them, as that's where my Google 401k was.)","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T12:18:03.000Z","created_at_i":1535631483,"id":17876039,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Can I use it for my bank too?","title":null,"type":"comment","url":null},{"author":"zaarn","children":[],"created_at":"2018-08-30T12:53:45.000Z","created_at_i":1535633625,"id":17876245,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"For 50$ I don't really see the point in this, Yubikey already asks this much.
I'll probably wait out for the FIDO2 upgrade on the u2fzero...","title":null,"type":"comment","url":null},{"author":"amelius","children":[{"author":"moviuro","children":[],"created_at":"2018-08-30T13:04:51.000Z","created_at_i":1535634291,"id":17876324,"options":[],"parent_id":17876295,"points":null,"story_id":17875658,"text":"Per-purpose passwords. https://support.google.com/accounts/answer/185833?hl=en
Per-purpose users (with very limited rights) on machines, inside per-purpose VMs (with very limited network if any)... etc.","title":null,"type":"comment","url":null},{"author":"jrockway","children":[],"created_at":"2018-08-30T13:41:44.000Z","created_at_i":1535636504,"id":17876605,"options":[],"parent_id":17876295,"points":null,"story_id":17875658,"text":"A persistent token like OAuth. Generally, you want these to be time-limited, scope-limited, and traceable to a human (probably issued by touching a security key).
Part of the idea behind the security key is to prove that a human is requesting access and that is why there is a button to press. If your application is designed to give privileges to robots, then a security key is completely orthogonal to that.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:00:58.000Z","created_at_i":1535634058,"id":17876295,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Nice for humans, but these dongles don't solve the problem of automated background services having to log in to machines to complete their tasks. How do people solve this problem?","title":null,"type":"comment","url":null},{"author":"Postosuchus","children":[{"author":"anilakar","children":[{"author":"helper","children":[],"created_at":"2018-08-30T18:15:43.000Z","created_at_i":1535652943,"id":17879211,"options":[],"parent_id":17876481,"points":null,"story_id":17875658,"text":"Yubikey does support storing TOTP secrets. It requires you use their app (desktop or android) which then provides the time component.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:27:28.000Z","created_at_i":1535635648,"id":17876481,"options":[],"parent_id":17876429,"points":null,"story_id":17875658,"text":"These devices don't have a real-time clock, so TOTP is out of the question. A Yubikey by itself is incapable of doing TOTP, too \u2013 it just acts as a hardware authenticator for the actual password generator. HOTP/counter mode doesn't have this requirement.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:20:15.000Z","created_at_i":1535635215,"id":17876429,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"The store page sucks balls - no details whatsoever!
Does anyone know how these keys could be used for TOTP? In case of Yubikey one could use an app which effectively acted as a proxy between the TOTP-based system and a hardware key. Does the Google key support the same functionality?","title":null,"type":"comment","url":null},{"author":"anilakar","children":[{"author":"hesdeadjim","children":[],"created_at":"2018-08-30T15:39:25.000Z","created_at_i":1535643565,"id":17877586,"options":[],"parent_id":17876510,"points":null,"story_id":17875658,"text":"Yea I was wondering this too.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T13:31:06.000Z","created_at_i":1535635866,"id":17876510,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Is it possible to use the Bluetooth dongle with a desktop computer without a cable? Having to carry both on your keyring kind of defeats the purpose, because even Google's own guidelines tell you to store one in a safe place and keep the other one in daily use.","title":null,"type":"comment","url":null},{"author":"meanmartine","children":[],"created_at":"2018-08-30T13:42:07.000Z","created_at_i":1535636527,"id":17876607,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Yeah, no thanks","title":null,"type":"comment","url":null},{"author":"Demoneeri","children":[],"created_at":"2018-08-30T14:26:46.000Z","created_at_i":1535639206,"id":17876976,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Excuse my ignorance (I'm trying to understand by googling). I know it's not the same technology but is it the same concept (public/private key) as for example the Estonian government uses for identity and accessing government services?","title":null,"type":"comment","url":null},{"author":"jameskegel","children":[{"author":"ecesena","children":[{"author":"amingilani","children":[{"author":"ecesena","children":[],"created_at":"2018-08-31T19:46:18.000Z","created_at_i":1535744778,"id":17888204,"options":[],"parent_id":17877929,"points":null,"story_id":17875658,"text":"The problem I think is the browser, e.g. Chrome only implements CTAP over USB. The Secure Click (yet another security key) is sold with a usb2ble dongle, so you can use it wirelessly also with your laptop/desktop.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:19:47.000Z","created_at_i":1535645987,"id":17877929,"options":[],"parent_id":17877886,"points":null,"story_id":17875658,"text":"The Feitan key's Bluetooth works with Android and iPhone but it won't work with your Mac or Windows. I own one, that bit was an unexpected pain for me.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:15:45.000Z","created_at_i":1535645745,"id":17877886,"options":[],"parent_id":17877777,"points":null,"story_id":17875658,"text":"It's pretty much the same.
One of these keys has bluetooth so it also works with iphone without any cable.","title":null,"type":"comment","url":null},{"author":"amingilani","children":[],"created_at":"2018-08-30T16:16:42.000Z","created_at_i":1535645802,"id":17877895,"options":[],"parent_id":17877777,"points":null,"story_id":17875658,"text":"It won't. Stick with what you have, it's essentially a bundle to help non-U2F owners start with their Advanced Protection Program.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:02:31.000Z","created_at_i":1535644951,"id":17877777,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"How would Google Titan improve the 2F experience for someone who already uses a dongle-key device like a Yubikey, for example?","title":null,"type":"comment","url":null},{"author":"amingilani","children":[],"created_at":"2018-08-30T16:25:15.000Z","created_at_i":1535646315,"id":17877976,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Question for Advanced Protection and Mac users.
Have you managed to authenticate your Google account with your U2F keys on your Mac?
If you have, please help the rest of us out, I get an error:
> You can only use your Security Keys with Google Chrome.
Here's a StackExchange question for some karma: https://apple.stackexchange.com/questions/327491/how-do-i-us...","title":null,"type":"comment","url":null},{"author":"steven2012","children":[{"author":"guessmyname","children":[{"author":"toyg","children":[{"author":"patejam","children":[{"author":"ufmace","children":[],"created_at":"2018-08-30T20:38:46.000Z","created_at_i":1535661526,"id":17880525,"options":[],"parent_id":17879835,"points":null,"story_id":17875658,"text":"If it gets stolen, and the thief is actually trying to take over your accounts, then the process of proving that you are the rightful owner is probably easier if you have the key than if the thief has both the laptop and the key.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T19:16:50.000Z","created_at_i":1535656610,"id":17879835,"options":[],"parent_id":17879518,"points":null,"story_id":17875658,"text":"If someone has physical access, isn't it considered compromised anyway?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T18:43:28.000Z","created_at_i":1535654608,"id":17879518,"options":[],"parent_id":17878198,"points":null,"story_id":17875658,"text":"Isn't it incredibly risky to leave it in-port? If the laptop is stolen, the thief also gets all your logins...","title":null,"type":"comment","url":null},{"author":"jonahhorowitz","children":[{"author":"daxelrod","children":[],"created_at":"2018-08-31T01:14:58.000Z","created_at_i":1535678098,"id":17882194,"options":[],"parent_id":17880101,"points":null,"story_id":17875658,"text":"I\u2019ve been interested in setting something like this up. Are you aware of software that exists for it already?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T19:47:59.000Z","created_at_i":1535658479,"id":17880101,"options":[],"parent_id":17878198,"points":null,"story_id":17875658,"text":"If you're clever about it, you can do U2F using the secure enclave built into touchID. You don't even need a separate device.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:47:09.000Z","created_at_i":1535647629,"id":17878198,"options":[],"parent_id":17878046,"points":null,"story_id":17875658,"text":"I would prefer one from Apple as well, but mostly because my laptop (which was built by Apple) only has USB-C ports, so carrying an USB-A adapter, like the one shown in the picture [1], would be a deal breaker for me and many others. Something like the YubiKey 4C Nano [2] would be good.
[1] https://i.imgur.com/79ojvAK.jpg
[2] https://www.yubico.com/product/yubikey-4-series/#yubikey-4c-...","title":null,"type":"comment","url":null},{"author":"antpls","children":[],"created_at":"2018-08-30T16:50:52.000Z","created_at_i":1535647852,"id":17878236,"options":[],"parent_id":17878046,"points":null,"story_id":17875658,"text":"We don't know if or when the FBI will be able to crack iPhones. There are news (maybe fake) on the internet about a machine that can be plugged into iPhones and dump data from it, and that machine is only sold to thieves or gov agencies.
When you look at the recent clashes with Google and the gov, for example stopped military project or Trump accusing Google of political bias, it doesn't seem Google is "in the same bed" than the gov.
To me, both Apple and Google are good trustable and competent entities. They both have high standards. I personally trust Google more about data security, but I guess everyone is different.","title":null,"type":"comment","url":null},{"author":"dirkgently","children":[],"created_at":"2018-08-30T17:13:01.000Z","created_at_i":1535649181,"id":17878514,"options":[],"parent_id":17878046,"points":null,"story_id":17875658,"text":"And here they are. Every time. Without fail. Without any data to backup FUD. The Apple fanbois. The Google haters.","title":null,"type":"comment","url":null},{"author":"craftkiller","children":[],"created_at":"2018-08-31T16:09:00.000Z","created_at_i":1535731740,"id":17886681,"options":[],"parent_id":17878046,"points":null,"story_id":17875658,"text":"> The fact that the FBI couldn't get into an iPhone
You sure about that?
1. FBI unlocks iPhone without Apple's help
2. Snowden documents show 100% success rate against iPhones
3. Graykey device to break into iPhones
[1] https://www.npr.org/sections/thetwo-way/2016/03/28/472192080...
[2] https://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-rep...
[3] https://blog.malwarebytes.com/security-world/2018/03/graykey...","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T16:31:34.000Z","created_at_i":1535646694,"id":17878046,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"I would prefer one from Apple. I don't trust Google as much as I do Apple, simply because I know they don't make money from my data. The fact that the FBI couldn't get into an iPhone makes me trust Apple much more. If I start using this Google key, I'm not sure how far in bed they are with the government and if they can crack my accounts.","title":null,"type":"comment","url":null},{"author":"alecbenzer","children":[],"created_at":"2018-08-30T16:52:35.000Z","created_at_i":1535647955,"id":17878258,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"What's the summary on how security keys compare to Google's tap-to-sign-in flow? https://support.google.com/accounts/answer/7026266?co=GENIE....","title":null,"type":"comment","url":null},{"author":"extrapolate","children":[],"created_at":"2018-08-30T17:42:48.000Z","created_at_i":1535650968,"id":17878848,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Anyone able to actually purchase one? I'm just seeing a "Join waitlist" button.","title":null,"type":"comment","url":null},{"author":"mitchtbaum","children":[],"created_at":"2018-08-30T17:56:05.000Z","created_at_i":1535651765,"id":17878987,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"I would rather use something like this:\nhttps://www.thingiverse.com/thing:1970583","title":null,"type":"comment","url":null},{"author":"nikolay","children":[{"author":"jamesgeck0","children":[{"author":"nikolay","children":[],"created_at":"2018-08-30T18:48:47.000Z","created_at_i":1535654927,"id":17879571,"options":[],"parent_id":17879453,"points":null,"story_id":17875658,"text":"I already gave my email to Google that I'm interested and now I need to be added to yet another waiting list? What's the point? All this buzz is actually hurting Google as people become aware of these products and services and because Titan is not immediately available, they will end up with alternatives such as YubiKey.","title":null,"type":"comment","url":null},{"author":"nikolay","children":[],"created_at":"2018-08-30T18:49:51.000Z","created_at_i":1535654991,"id":17879588,"options":[],"parent_id":17879453,"points":null,"story_id":17875658,"text":"And, for the record, Google sent me an email that Google One is available, but it is not.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T18:38:25.000Z","created_at_i":1535654305,"id":17879453,"options":[],"parent_id":17879280,"points":null,"story_id":17875658,"text":"That's on the person who submitted, not Google. The word "available" doesn't appear on the page in regards to this product.","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T18:21:16.000Z","created_at_i":1535653276,"id":17879280,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":""Available" just like Google One is? I hate when people make things "available" this way! Don't they know the meaning of the word?!","title":null,"type":"comment","url":null},{"author":"Thriptic","children":[],"created_at":"2018-08-30T18:28:28.000Z","created_at_i":1535653708,"id":17879340,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Is it possible to set up advanced protection on the ipad using the camera adapter and a yubikey, or a bluetooth key required?","title":null,"type":"comment","url":null},{"author":"johntash","children":[],"created_at":"2018-09-01T05:30:28.000Z","created_at_i":1535779828,"id":17890409,"options":[],"parent_id":17875658,"points":null,"story_id":17875658,"text":"Just to make sure.. these don't provide GPG/PGP smartcard support, right?","title":null,"type":"comment","url":null}],"created_at":"2018-08-30T11:01:39.000Z","created_at_i":1535626899,"id":17875658,"options":[],"parent_id":null,"points":176,"story_id":17875658,"text":null,"title":"Google Titan Security Key now available","type":"story","url":"https://store.google.com/us/product/titan_security_key_kit?hl=en-US"}
![https://i.imgur.com/79ojvAK.jpg](\"https://i.imgur.com/79ojvAK.jpg\"){kind=link}