Hacker News Reader

This seemed odd to me as well - anecdata, but I have yet to work at any company that uses YubiKeys, I have only heard that FB does.

View on HN

FWIW Amazon / AWS also use YubiKeys.

Google as well. (Physical security keys, at least - I make no specific statement about branding)

I think they would be Titans.

google doesn't use google authenticator? How odd.

Google and Amazon are both well known to use hardware that is similar to a Yubikey, but not exactly the same.

Google open sourced FIDO2 firmware to make a 2fa device. May not be related to Titan keys.

https://github.com/google/OpenSK

I previously worked at AWS. I definitely used a company issued actual YubiKey while there.

Amazon may use keys from a variety of sources, but the ones I’ve seen were packaged differently from anything I’ve seen from an actual Yubikey.

If only people were allowed to bring their own Yubikey for U2F and OTP, then they wouldn’t have to wait on whatever official procurement processes are in place from their approved suppliers.

I've got a couple branded ones from amazon IT -- a big one and a tiny one. Currently they're giving out some other one, but I think you can bring your own too

Reply on news.ycombinator.com