Dirk Balfanz

Huge day for passkeys! Starting today, you can set up a passkey for your Google account. At this stage of the industry-wide transition, setting up a passkey doesn’t invalidate your password, so it’s 100% safe to set up. blog.google/technology/saf…

New today at #WWDC21! 🔑 Passwords are fundamentally flawed. The future of app/website authentication for everyone should be secure by design, easy to use, and built on standards. Learn about passkeys — synced WebAuthn credentials — in iCloud Keychain. developer.apple.com/wwdc21/10106

1/ Recently, we switched Figma's Okta to only allow phish-proof webauthn/FIDO MFA. I wanted to share a few things that helped us and might come in handy for any other security team.

@Google Advanced Protection users now benefit of additional protections on @Android blog.google/products/andro…

Today we've made the @Google Advanced Protection Program even easier: No separate security keys required, just use your Android or iPhone to enroll instantly. blog.google/technology/saf…

Advanced Protection is the Internet’s strongest and most unphishable account security. To help protect the people most at risk, we’re offering up to $35 off Titan security keys. Use the code B-TITAN35OFF for up to $35 off at store.google.com/product/titan_… 🔐

Blog post about the work Google's Threat Analysis Group (TAG) does. Targeted phishing stats, Sandworm campaign details and disinfo campaign takedowns. We plan to do more of these. blog.google/technology/saf… @t_gidwani @billyleonard

Just published 15,000+ words on security keys. 🔐📱💻 With SIM attacks at their highest, now is a great time to take a closer look at your online security. Removing SMS from your two-factor auth is a start, but authenticator apps have downsides too... paulstamatiou.com/getting-starte…

If you care about your account security please check this out and consider enabling. This is serious protection designed based on Google’s experience with countering targeted threats. twitter.com/davidlieber/st…

@boblord sorry to say it won't be recorded. Go to github.com/google/u2f-ref… and follow the instructions - that's almost like being there! :)

@waynepope Hi - can you point me to the bug and patch?

@ericlaw yes, temporary channel id extension # in Chrome 24 is 30031 (0x754F). (Sorry for delay - didn't see the mention)

Survey: Why do you log out? goo.gl/0KjdU

@johnbrayton nice write-up. Will shoot you an email. /CC @awans

Presenting 'ClientLogin #FAIL' tomorrow at #io2011 #GoogleAPIs google.com/events/io/2011…

Stanford women end UConn's 90-game basketball winning streak, 71-59 http://on.cnn.com/hgFvvn

Mike Jones collecting input for new OAuth spec at #IIW room E

Google launches two-step verification http://bit.ly/dy7d29

Write About Love: http://bit.ly/writeabout