Hacker News new | past | comments | ask | show | jobs | submit login

[dead]



Can you please explain or give sources on why Mt.Gox is Yubi's most public failure?

I started using Yubikey some months ago and this is news to me, so any info would be appreciated.


It had nothing to do with Yubikey. Mt.Gox implemented time based 2FA (think google authenticator) via Yubikey. The fact that Mt.Gox subsequently imploded had nothing to do with Yubikey and seems almost entirely to be based around a poor implementation with regards to handling bitcoin transactions combined with insider fraud.

Public disclosure, I lost ~$700 to Mt.Gox, a tiny amount compared to some, mostly I was just trying to cash out a couple coins at the height of the bubble. I'm not terribly upset over it, although it would have been nice to see that $700 in my account, or at least get my 2 coins back.


The prototype I've seen requires that you tap it, which is a major step forward. And I believe that the spec allows it to show something like "google.com" if it had a screen.


I think its pretty obvious that anything without a USB connection this probably won't work (maybe usb otg), but would 2FA still be used as a fall back ?


You can get NFC enabled keys to use with any device without USB that supports NFC


well in that case my desktop/laptops don't support NFC. So its still working on one platform and not another.


It still supports USB it just adds NFC, so you can still use it on your desktop/laptop - https://www.yubico.com/products/yubikey-hardware/yubikey-neo...


were mtgox accounts using yubikeys compromised or something? all i know of was the transaction malleability thing




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: