Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Launches Its Own Physical Security Key (cyberscoop.com)

Posted by msmash on from the how-about-that dept.

An anonymous reader writes: Google launched its own Titan Security Key on Wednesday, a small USB device which includes firmware developed by the omnipresent tech giant itself. This comes days after Google said its workforce has been phish-proof for more than a year thanks to security keys distributed to its 85,000 employees. The new key means new competition for Yubikey manufacturer Yubico which confirmed it is not involved with Google's new key. The product is available now to Google Cloud customers and will eventually be available to general customers, the company announced Wednesday at its Google Cloud Next conference in San Francisco. CNET, which tested the device, adds: It'll come in a bundle with both the USB and Bluetooth versions for $50, or you can buy one or the other for about $20 to $25 each, Brand said. The set of security keys should work on any device with a USB port or a Bluetooth connection.

4 of 100 comments (clear)

  1. 0wned by Google by DogDude · · Score: 3, Interesting

    I imagine this thing will make sure to slurp up every last piece of data that the good little Google drones aren't already giving the Mothership.

    --
    I don't respond to AC's.
  2. Bluetooth? Secure? Hahahaha that's hilarious by Rick+Schumann · · Score: 2, Interesting

    According to this story just posted yesterday, Bluetooth security is far from absolute.

  3. Re:And will it still work by bickerdyke · · Score: 4, Interesting

    As they were involved in developing the U2F standard, it shouldn't depend on any Google servers. It's more about how long Chrome will support U2F, but that would effect not only Google security keys.

    --
    bickerdyke
  4. Re: And will it still work by Jane+Q.+Public · · Score: 3, Interesting

    And this is why NFC is a terrible technology to use for making payments.

    It doesn't have to be "very close by" if you have a big enough antenna. That's the thing about RF. Make an antenna big enough, and you can send and receive at a distance, even with a device that is extremely low-powered.

    In general, people should not use anything that operates over radio frequencies to access their bank account. It's a fool's errand. Christopher Soghoian, the same guy who read RFID chips from passports outside an airport from 30 feet away, also cracked NFC before it ever became common in consumer products. With a portable device that cost only $200 to build.

    Put your NFC-capable cards in a foil sleeve (they're cheap), or snip the coil antenna. Instructions for the latter are all over the internet.