4 ms·

We started using these for internal services and Google accounts where I work. It's unfortunately a big pain in the butt- you can't use Safari, you can't use th

We started using these for internal services and Google accounts where I work. It's unfortunately a big pain in the butt- you can't use Safari, you can't use the Mac/iPhone calendar app to see your meetings. It's web apps in Chrome or nothing, more or less. The one type of key supposedly uses Bluetooth, but that functionality isn't built yet or something, so you get to carry around a little 4-inch microUSB cord with you everywhere you go, and connect that every single time you hit a 2FA prompt. At least the Yubikeys have a USB connector built into them.

tptacek 10y ago
Huh? I use the Google applications --- and, particularly, their calendar --- all the time without using Chrome, and U2F is my first-priority 2FA mechanism. You can mint static random application keys for your native applications, and use TOTP as a backup for when you want to use a different browser (really, though, you should use Chrome as much as you can; it's significantly more secure).
- draw_down 10y ago
  For some reason application passwords don't seem to work according to everyone who tried. I don't really know what TOTP is or how all of this is configured, that's the domain of our security team. I don't really know what you mean about Google apps, I just want to use the calendar app on my Mac and iPhone to see my meetings but I can't. I asked them about it and they confirmed to me that I should use the Google Calendar web app in Chrome. Using a web app on my Mac isn't the end of the world, but I can't see my meetings on my phone in any type of way, and I'm already missing them sometimes because the little notification on the phone is what reminds me that I have a meeting to go to.
  - nickik 10y ago
    In the Google security setting you can create new App-Passwords, use those in your Apple Mail or whatever. It should work fine.
    - draw_down 10y ago
      If only a comment on Hacker News saying something should work made it so :)
      - nickik 10y ago
        Well you said yourself that you are not an expert. I encourage you to actually play around with the settings a litte. I have used it multible times in different context and it has worked like a charm every time. So maybe if you spend some time on it, you can make it work.
      - edraferi 10y ago
        You can view the documentation here: https://support.google.com/accounts/answer/185833?hl=en https://support.google.com/accounts/answer/185833?hl=en One key caveat with these -- they grant access to your whole account, just like your real password. They don't give access to a specific scope (e.g. calendar) even through that might be all the application you're syncing needs.

tptacek 10y ago

Huh? I use the Google applications --- and, particularly, their calendar --- all the time without using Chrome, and U2F is my first-priority 2FA mechanism. You can mint static random application keys for your native applications, and use TOTP as a backup for when you want to use a different browser (really, though, you should use Chrome as much as you can; it's significantly more secure).

draw_down 10y ago
For some reason application passwords don't seem to work according to everyone who tried. I don't really know what TOTP is or how all of this is configured, that's the domain of our security team. I don't really know what you mean about Google apps, I just want to use the calendar app on my Mac and iPhone to see my meetings but I can't. I asked them about it and they confirmed to me that I should use the Google Calendar web app in Chrome. Using a web app on my Mac isn't the end of the world, but I can't see my meetings on my phone in any type of way, and I'm already missing them sometimes because the little notification on the phone is what reminds me that I have a meeting to go to.
- nickik 10y ago
  In the Google security setting you can create new App-Passwords, use those in your Apple Mail or whatever. It should work fine.
  - draw_down 10y ago
    If only a comment on Hacker News saying something should work made it so :)
    - nickik 10y ago
      Well you said yourself that you are not an expert. I encourage you to actually play around with the settings a litte. I have used it multible times in different context and it has worked like a charm every time. So maybe if you spend some time on it, you can make it work.
    - edraferi 10y ago
      You can view the documentation here: https://support.google.com/accounts/answer/185833?hl=en https://support.google.com/accounts/answer/185833?hl=en One key caveat with these -- they grant access to your whole account, just like your real password. They don't give access to a specific scope (e.g. calendar) even through that might be all the application you're syncing needs.