4 ms·
disclosure: I work at google The thing you have now communicates that yes click over the internet. This new thing communicates through a local channel (bluetoo
by gretch 8y ago
disclosure: I work at google
The thing you have now communicates that yes click over the internet. This new thing communicates through a local channel (bluetooth).
Communicating over a local channel prevents phishing.
Consider this attack: Attacker hosts googlee.com and you get tricked into going there. The login site looks exactly like the google site. You type in username/password just like normal. In that moment they take your phished credentials and pass it to the actual google server, like a man in the middle. Now you receive a prompt on your phone asking Yes/No. You click yes, okaying the attacker's login.
Now that same attack with the local channel communication - they can't take your signal and pass it on through to google
- plttn 8y agoAs there's very little documentation on this right now: couple of related questions (feel free to ignore them I don't want to guilt you into it) 1. It doesn't seem to be using the Titan M flow on my Pixel 3 currently 2. After reinstalling GMS on my phone to try and get the Titan M working, it stayed registered as a key, but the prompt never shows up on my device. I guess this is more of a "flag for internal review" vs a "please provide me with answers".