Hacker News Reader

timothy-quinnon Yubico launches its dual USB-C and Lightning two-factor security key

From what I've heard from Yubico the next version of iOS is going to make it far easier to communicate with the device. Integrations will probably still need to be added by the app developers though to take full advantage.

timothy-quinnon Yubico launches its dual USB-C and Lightning two-factor security key

This is something I'm trying to simplify with my product. The foundational security features of U2F (you can't interrogate the device to find out what other services are set up) make it basically impossible to migrate them to new devices, but all the other capabilities of the Yubikeys can be moved across.

This is really why U2F falls over in the Enterprise, at least from what I've seen. Customers want centralised management, but the U2F protocol just can't support that.

timothy-quinnon Yubico launches its dual USB-C and Lightning two-factor security key

In my experience too with testing the NEO, they're just not as reliable to work with compared to the later models (both over NFC and USB). I believe the NEO was the first to bring in new features for the Yubikey, and the kinks weren't all ironed out yet.

If you have a NEO still, I'd recommend at least upgrading to a 4 if you can.

timothy-quinnon Yubico launches its dual USB-C and Lightning two-factor security key

Typically for most keys used over NFC there's still a PIN challenge or some physical interaction with the device. There are some exemptions to this for usability (e.g. building access keys stored in PIV cards or the PIV applet in yubikeys), but in those cases too the keys are segregated by type to prevent misuse.

timothy-quinnon Startups from Y Combinator’s S19 Demo Day 1

We exist, but we're just not in the right country :)

From my experience working with a number of companies, the challenge seems to just come down to a lack of people in the industry.

timothy-quinnon Show HN: Signata – A Personal Cryptocurrency Vault Service That Uses Yubikeys

Hi HN, co-founder of Signata here.

We're running in a closed Beta at the moment until we iron out any major bugs remaining, but you can fill out a form to request access if you're interested: https://forms.gle/iqP2Bh7ABGuzRaPf8

We've also only published the Windows desktop app at the moment - we have the Mac app built and tested but we're just dealing with the Apple notarization process first before we can release that :)

You can read more about the launch here too: https://medium.com/@congruent_tim/announcing-signata-cd86001...