They both seem to be re-branded Feitian, which cost less ($25 + $17 = $42) when purchased under that brand from Amazon than the Google Titan moniker.
The key is made by a company called Feitian (Feitian Technologies Co., Ltd), on Amazon. That's the original manufacturer selling directly on Amazon [1]. That's the only one available. Its about as authentic as you can get on Amazon. I'd rather buy it from Gearbest or Banggood but they don't sell this. And Google just sells it rebranded.
Though I won't buy this (I could use the BLE part of it), since for one it doesn't seem to be build strongly (overcome-able but still), it only seems to work with Chrome according to reviews (I use Firefox), and I'm unsure if Bluetooth is secure for this method, nor reliable. NFC should be fine, since its much closer range, and I have a YubiKey NEO but my phone doesn't have NFC, unfortunately.
[1] https://www.amazon.com/Feitian-MultiPass-FIDO-Security-Key/d...
Also, in Google's $50 there are also 2 cables usb-a2c and c2a. I guess they decided to go the way of the complete package with all you may need.
We're having a kickstarter soon, and if you're interested you can join the waiting list at https://solokeys.com/
It's only a syllable away.
https://www.yubico.com/product/yubikey-4-series/
What makes you think that the cost to produce the hardware is less than $10? And what reason would companies have to offer keys below cost?
Admittedly you'd have to pay for a plastic case, assembly costs, an envelope and stamps. But if I can get a 16GB flash drive for $8 with free shipping [2] the plastic case, assembly etc can't be that expensive!
[1] https://github.com/conorpp/u2f-zero [2] https://www.amazon.com/SanDisk-Cruzer-Low-Profile-Drive-SDCZ...
This is more like the Yubikey Security Key ($20): https://www.yubico.com/product/security-key-by-yubico/#secur...
That's just for hunks of plastic. For complex (not a hunk of injected-molded plastic) devices with high non-BOM costs, you should be targeting 4x-5x at a minimum.
Also, the 3x-5x rule is for bare-bones lean operations. If you actually want to make money, compensate your employees well, practice good environmental stewardship in the construction of your products, use a manufacturer that treats its employees with respect, and have a healthy business where you are prepared to weather future changes in the market, your BOM costs should be LESS THAN 20% of the MSRP.
The model is also different if you are a Shenzhen ripoff factory dumping goods onto the market through Marketplace Sellers or Drop-Shippers. But that is not a model compatible with long-term prosperity or worker satisfaction.
2. this link does not work outside US
The only computer I own that has a USB Type C port is my homebuilt desktop, and it's on the back, and I don't think the Windows driver actually works.
To my knowledge there are no such adapters that are compliant with the USB spec.
https://store.google.com/us/product/titan_security_key_kit?h...
Use this link to force-redirect to the US product page: https://store.google.com/us/product/titan_security_key_kit?h...
(mods, can we please change the story URL to the above one? It should show the correct item globally and thus leaving less people confused.)
[1] https://i.imgur.com/79ojvAK.jpg
[2] https://www.yubico.com/product/yubikey-4-series/#yubikey-4c-...
You sure about that?
1. FBI unlocks iPhone without Apple's help
2. Snowden documents show 100% success rate against iPhones
3. Graykey device to break into iPhones
[1] https://www.npr.org/sections/thetwo-way/2016/03/28/472192080...
[2] https://www.forbes.com/sites/erikkain/2013/12/30/the-nsa-rep...
[3] https://blog.malwarebytes.com/security-world/2018/03/graykey...
When you look at the recent clashes with Google and the gov, for example stopped military project or Trump accusing Google of political bias, it doesn't seem Google is "in the same bed" than the gov.
To me, both Apple and Google are good trustable and competent entities. They both have high standards. I personally trust Google more about data security, but I guess everyone is different.
https://en.wikipedia.org/wiki/Time-based_One-time_Password_a...
Instead of typing in a code, you press a button. It also protects against phishing by validating the URL of the site you're authenticating on (with a code-based 2FA you can still enter your code on a phishing site, which then forwards it to the real one).
Seems like it might be useful, but haven't had the time to try it out yet.
One of these keys has bluetooth so it also works with iphone without any cable.
EDIT: Revisting, it states anything running Google Chrome should also work. So I guess macOS should be fine, what about iOS?
Per-purpose users (with very limited rights) on machines, inside per-purpose VMs (with very limited network if any)... etc.
Part of the idea behind the security key is to prove that a human is requesting access and that is why there is a button to press. If your application is designed to give privileges to robots, then a security key is completely orthogonal to that.
Does anyone know how these keys could be used for TOTP? In case of Yubikey one could use an app which effectively acted as a proxy between the TOTP-based system and a hardware key. Does the Google key support the same functionality?
Each key bundle comes with a physical USB security key and a Bluetooth security key—one for your primary use and one for safe keeping.I'll probably wait out for the FIDO2 upgrade on the u2fzero...
Have you managed to authenticate your Google account with your U2F keys on your Mac?
If you have, please help the rest of us out, I get an error:
> You can only use your Security Keys with Google Chrome.
Here's a StackExchange question for some karma: https://apple.stackexchange.com/questions/327491/how-do-i-us...