Android devices updated with the upcoming June 2019 Security Patch Level (SPL) and beyond will automatically unpair affected Bluetooth devices, so you won’t need to unpair manually. "After you’ve used your affected security key to sign into your Google Account, immediately unpair it. Google again recommended keeping hackers at a 30-feet distance. However, when you update to iOS 12.3 your security key will no longer work, so those users should stay logged in to their accounts so that they aren't locked out. You can use your key in this manner again while waiting for your replacement, until you update to iOS 12.3," Google said. "After you’ve used your key to sign into your Google account on your device, immediately unpair it (opens in new tab). Google recommended these users use their key in a "private place" where any potential hackers are over 30 feet away. While you’re awaiting a replacement key, however, there are steps you can take to mitigate your risk, depending on whether you’re using an iOS or Android Device.
Note this security flaw does not apply to USB or NFC security keys. Google said using its Titan keys is still safer than not using a security key at all (although it conveniently left out the option of seeking a competitor, like a YubiKey).
does not provide the security assurance levels of NFC and USB and requires batteries and pairing that offer a poor user experience," it said at the time. "While Yubico previously initiated development of a security key and contributed to the U2F standards work, we decided not to launch the product as it does not meet our standards for security, usability and durability. The news comes almost a year after a statement (opens in new tab) by Yubico, (which Google used to buy security keys from before developing its own) questioning the strength of Bluetooth-based security keys.
0 kommentar(er)
