4 ms·
Title (original from TFA) is very misleading. The study is too late in the process of setting up 2FA. No one in the study was motivated to set up 2FA in the fir
by jiveturkey 8y ago
Title (original from TFA) is very misleading. The study is too late in the process of setting up 2FA. No one in the study was motivated to set up 2FA in the first place. This is "merely" a UX study that benefits Yubico. It doesn't address (at all) why people do or do not want 2FA in the first place.
To use my own insight: regular joe does not want to buy an expensive product and install some hardware. (the "cheap" $20 ones are literally worse than useless. but even $20 is too much.) 2FA's future is in touchID (integrated into touch bar on mac) and push to a phone app. The latency of push to a phone app is more acceptable than the confusion and vagary around adding an expensive usb key that you don't understand and then doesn't work on your mobile anyway.
- mvanbaak 8y ago"then doesn't work on your mobile anyway." The yubikey neo works perfectly on your mobile, as long as it has NFC support.
- javagram 8y agoU2F through the yubikey doesn’t work on iOS devices because iOS NFC is only 1-way outside of Apple Pay.
- jacquesm 8y agoI hate private APIs. There ought to be a law that vendors can only use public APIs.
- Tomte 8y agoSo Apple is out, right?
- DarkStar851 8y agoWhat? iPhone 6s and newer supports NFC.
- gruez 8y ago6s supports NFC for EMV only. 8 and newer has generic NFC support. https://developer.apple.com/documentation/corenfc https://developer.apple.com/documentation/corenfc
- deleted 8y ago[deleted]
- sofaofthedamned 8y agoOnly for Apple Pay, which is another reason Apple are disingenuous when it comes to security.
- jiveturkey 8y agoi'm sure the neo is flying off the shelves at $50 ... it's awkward enough for desktop use that push to mobile is a superior UX
- m-p-3 8y agoSadly my Xiaomi device doesn't..
- techsupporter 8y ago> the "cheap" $20 ones are literally worse than useless. How so? > 2FA's future is in touchID (integrated into touch bar on mac) and push to a phone app. As another person pointed out, this is quite literally what krypt.co's Krypton app does and it integrates with existing U2F/FIDO standards so either a hard or soft device can be used.
- StavrosK 8y agoKrypt.co looks pretty nice, I have a Yubikey and andOTP but I hate either getting up to fetch the hardware key or fumbling about for the right TOTP code, so the soft-approve by Krypton looks like the most convenient option, and reasonably secure, to boot.
- yayana 8y agoI find that quote odd too. I find the $10 USB-only ones useful, I just wish they had dual normal/micro USB like some flash sticks. I don't want Bluetooth, NFC or software u2f devices for security reasons, but I also think they could each have additional support problems if given to family members. The ideal option for me would be an applet on a smartcard in my phone's 2nd sim bay and a hard power toggle for the 2nd bay. Then I suppose my phone could also provide proxying of u2f as a USB device. But last I looked Android was blocking access to simcard slots for general purpose..
- dijit 8y agoWhat about krypt.co ?