Hacker News Reader

But she will enter the info from the SMS that Facebook sends to her?

I mean, comparing U2F keys with the alternative 2FA methods (like SMS and Google Authenticator), it sure seems simpler to just tap the USB key instead of taking out your phone, unlocking it, seeing the message, and writing the code from the message.

They're convenient as hell.

View on HN

You're right. 2FA is convenient as hell until biometric authentication will do it with user's consent ( just tap something ). Yubico is quite near this target, but fragile usb dongle hanging from the side of your laptop isn't still optimal. FIDO is doing great work trying to bring secure authentication on the market, but the risk is that it'll be another complex OpenID which is killed by the giants ( Google, M$ etc ).

> but fragile usb dongle hanging from the side of your laptop isn't still optimal.

And that's why we have Yubikey Nano versions. And as for them being fragile, I really don't experience that. Mine one has been sitting on my keychain for about a year and a half and it seems rock-solid. Even though it has been through rains and thrown around countless times, it still works like it did on the day one. Even though it's plastic, it is pretty durable from my perspective.

Reply on news.ycombinator.com