Hacker News new | ask | show | jobs
by masonhensley 2892 days ago
Can someone explain this?

> “Yubikey cost Google less than their own authenticator app,” Ehrensvärd said, and there have been no account takeovers since the program was implemented, Google says.

1 comments

Perhaps he is factoring is the human cost. Yubikeys save a couple of minutes multiple times per day.
I took it as the cost of just purchasing Yubikeys for everyone was less than the payroll and associated costs of developing the Authenticator app.

But I could either interpretation (or both) being correct.

Could also be the security benefit. Authenticator-style apps are still vulnerable to MITM attacks, where physical keys are not.