6 ms·
My Pixel 2 already does this. When I sign into Google I get a notification that asks if I'm signing in, I click yes, done-zo. Is the only thing new here the UI
by tjbiddle 8y ago
My Pixel 2 already does this. When I sign into Google I get a notification that asks if I'm signing in, I click yes, done-zo.
Is the only thing new here the UI + that it's open for all Android 7.0 phones now?
- gretch 8y agodisclosure: I work at google The thing you have now communicates that yes click over the internet. This new thing communicates through a local channel (bluetooth). Communicating over a local channel prevents phishing. Consider this attack: Attacker hosts googlee.com and you get tricked into going there. The login site looks exactly like the google site. You type in username/password just like normal. In that moment they take your phished credentials and pass it to the actual google server, like a man in the middle. Now you receive a prompt on your phone asking Yes/No. You click yes, okaying the attacker's login. Now that same attack with the local channel communication - they can't take your signal and pass it on through to google
- plttn 8y agoAs there's very little documentation on this right now: couple of related questions (feel free to ignore them I don't want to guilt you into it) 1. It doesn't seem to be using the Titan M flow on my Pixel 3 currently 2. After reinstalling GMS on my phone to try and get the Titan M working, it stayed registered as a key, but the prompt never shows up on my device. I guess this is more of a "flag for internal review" vs a "please provide me with answers".