Thursday, May 16, 2019

Security Issue BLE Security Keys - Advanced Protection Program

I have two keys for my Google Advanced Protection Program.

  • Kensington VeriMark
  • Feitian MultiPASS FIDO

VeriMark is a USB only device but also acts as a Windows Hello Biometric authentication source, its dual purpose and very handy. I'd say the cheapest way to get Windows Hello in any PC.

VeriMark also acts as a Windows Hello device

Mutipass is a handy tool, as it has 3 interfaces - USB, BLE & NFC.

Recently Google found an issue with security keys with BLE & I first noticed in my Feedly but soon got an email as well.

I thought I can't get a free replacement key but surprisingly Feitian's K13 (1,2 & 3) were listed as options. Mine is K13 3, marked with ③ at the back of the security key.


There is this form via which you can get a free replacement after you enter your address, provided you're in the US and have purchased the Titan key; if you are outside the US and doesn't have the Titan branded key but still have something similar, I am not sure if you are either affected or if you are entitled for a free replacement key. In this page that I referenced above, there is a comment section where you can post queries, I have asked whether my mutipass is affected and am waiting to hear back from Google.


If in case K13 3 is affected, I hope Google can send out a free replacement or at least offer the new unaffected Titan keys in the Indian Google Store for me and others to purchase. I'd hate to turn off APP just because of this key issue, as otherwise I can't use my OnePlus 6.


If in case you too are enrolled in APP, check and see your mileage. Good luck!


Links:



[Page where you can check/request a replacement key] (https://myaccount.google.com/replacemykey)

[Feitian's general page] (https://www.ftsafe.com/article/563.html)



Update:

Google is kind enough to discount almost everything - MultiPASS and e-PASS bundle at $1 but customs wants $29 for an item valued at $40, sad.


No comments:

Post a Comment