Breaking News

Sony Unveils Sony FE 100mm F2.8 Macro GM OSS Creative Launches Aurvana Ace 3 GIGABYTE Announces Availability of 27” QHD 280Hz WOLED Gaming Monitor MO27Q28G with 4-Sided Borderless Design Crucial ® LPCAMM2 Powers AI-Ready Laptops With Breakthrough 8,533MT/s Speeds Logitech announces MX Master 4

logo

  • Share Us
    • Facebook
    • Twitter
  • Home
  • Home
  • News
  • Reviews
  • Essays
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map

Search form

Google Says Bluetooth Low Energy (BLE) Titan Security Keys Are Vulnerable

Google Says Bluetooth Low Energy (BLE) Titan Security Keys Are Vulnerable

Enterprise & IT May 15,2019 0

Google announced an issue that affects the Bluetooth Low Energy (BLE) version of the Titan Security Key available in the U.S. and is providing users with the steps needed in order to receive a free replacement key.

The bug affects Bluetooth pairing only, so non-Bluetooth security keys are not affected. Current users of Bluetooth Titan Security Keys should continue to use their existing keys while waiting for a replacement, since security keys provide the strongest protection against phishing, Google said.

Due to a misconfiguration in the Titan Security Keys’ Bluetooth pairing protocols, it is possible for an attacker who is physically close to you at the moment you use your security key -- within approximately 30 feet -- to (a) communicate with your security key, or (b) communicate with the device to which your key is paired.

This security issue does not affect the primary purpose of security keys, which is to protect you against phishing by a remote attacker. Security keys remain the strongest available protection against phishing; it is still safer to use a key that has this issue, rather than turning off security key-based two-step verification (2SV) on your Google Account or downgrading to less phishing-resistant methods (e.g. SMS codes or prompts sent to your device). This local proximity Bluetooth issue does not affect USB or NFC security keys.

This issue affects the BLE version of Titan Security Keys. To determine if your key is affected, check the back of the key. If it has a “T1” or “T2” on the back of the key, your key is affected by the issue and is eligible for free replacement.

If you want to minimize the remaining risk until you receive your replacement keys, you can perform the following additional steps:

On devices running iOS version 12.2 or earlier, Google recommends using your affected security key in a private place where a potential attacker is not within close physical proximity (approximately 30 feet). After you’ve used your key to sign into your Google Account on your device, immediately unpair it. You can use your key in this manner again while waiting for your replacement, until you update to iOS 12.3.

Once you update to iOS 12.3, your affected security key will no longer work. You will not be able to use your affected key to sign into your Google Account, or any other account protected by the key, and you will need to order a replacement key. If you are already signed into your Google Account on your iOS device, do not sign out because you won’t be able to sign in again until you get a new key.

On Android and other devices, Google recommends using your affected security key in a private place where a potential attacker is not within close physical proximity (approximately 30 feet). After you’ve used your affected security key to sign into your Google Account, immediately unpair it. Android devices updated with the upcoming June 2019 Security Patch Level (SPL) and beyond will automatically unpair affected Bluetooth devices, so you won’t need to unpair manually. You can also continue to use your USB or NFC security keys, which are supported on Android and not affected by this issue.

Google recommends that everyone with an affected BLE Titan Security Key get a free replacement by visiting google.com/replacemykey.

Tags: GoogleSecurity
Previous Post
U.S. Bans Huawei From Buying U.S. Technology
Next Post
Tesla's Solar Factory to Make EV Chargers

Related Posts

  • Google announces Pixel 10, Pixel 10 Pro Fold and Pixel Buds 2a

  • Elevate your gameplay across mobile and PC

  • What’s new in Android 15, plus more updates

  • NVIDIA Teams Up With Google DeepMind to Drive Large Language Model Innovation

  • Google at CES 2024

  • Google introduces Gemini AI model

  • Google Cloud Launches AI-Powered Anti Money Laundering Product for Financial Institutions

  • Connecting all things Android at MWC Barcelona

Latest News

Sony Unveils Sony FE 100mm F2.8 Macro GM OSS
Cameras

Sony Unveils Sony FE 100mm F2.8 Macro GM OSS

Creative Launches Aurvana Ace 3
Consumer Electronics

Creative Launches Aurvana Ace 3

GIGABYTE Announces Availability of 27” QHD 280Hz WOLED Gaming Monitor MO27Q28G with 4-Sided Borderless Design
Gaming

GIGABYTE Announces Availability of 27” QHD 280Hz WOLED Gaming Monitor MO27Q28G with 4-Sided Borderless Design

Crucial ® LPCAMM2 Powers AI-Ready Laptops With Breakthrough 8,533MT/s Speeds
Enterprise & IT

Crucial ® LPCAMM2 Powers AI-Ready Laptops With Breakthrough 8,533MT/s Speeds

Logitech announces MX Master 4
Enterprise & IT

Logitech announces MX Master 4

Popular Reviews

be quiet! Dark Mount Keyboard

be quiet! Dark Mount Keyboard

Terramaster F8-SSD

Terramaster F8-SSD

be quiet! Light Mount Keyboard

be quiet! Light Mount Keyboard

be quiet! Light Base 600 LX

be quiet! Light Base 600 LX

be quiet! Pure Base 501

be quiet! Pure Base 501

Soundpeats Pop Clip

Soundpeats Pop Clip

Akaso 360 Action camera

Akaso 360 Action camera

Dragon Touch Digital Calendar

Dragon Touch Digital Calendar

Main menu

  • Home
  • News
  • Reviews
  • Essays
  • Forum
  • Legacy
  • About
    • Submit News

    • Contact Us
    • Privacy

    • Promotion
    • Advertise

    • RSS Feed
    • Site Map
  • About
  • Privacy
  • Contact Us
  • Promotional Opportunities @ CdrInfo.com
  • Advertise on out site
  • Submit your News to our site
  • RSS Feed