MultiversX Tracker is Live!

Possible WebAuthn / Passkey bug on Linux with YubiKey 5 NFC

Binance

Cryptocoins Exchanges / Binance 9 Views

I'm experiencing what appears to be a WebAuthn/Passkey concern on Binance and want to know if anyone can reproduce it.

Setting

  • OS: Linux Mint 22.three
  • YubiKey: YubiKey 5 NFC
  • Firmware: 5.7.four
  • Browsers tested:
    • Brave 1.92.143 (Chromium 150.0.7871.182)
    • Chromium 150.0.7871.124
  • Each browsers produce the exact same conduct.

Steps to reproduce

  1. Log in to Binance.
  2. Go to Security β†’ Passkeys / Security Keys.
  3. Add a new security key using the YubiKey.
  4. The browser:
    • asks for the YubiKey FIDO2 PIN,
    • then the YubiKey LED starts blinking,
    • I contact the security key,
    • Binance stories that the important thing has been efficiently added.
  5. Binance immediately sends the affirmation e-mail saying that a new passkey/security key has been added.

Every little thing appears to complete efficiently.

Drawback

After logging out:

  1. I enter my e-mail tackle.
  2. I click Proceed with passkey.
  3. The browser again asks for the YubiKey PIN.
  4. The YubiKey LED blinks.
  5. I touch the key.
  6. The browser returns:

Authentication all the time fails.

Further observations

  • Binance shows the registered credential as:

Safety Key on Linux Cross System 

which appears uncommon for a USB YubiKey.

  • Deleting the registered key from Binance additionally requires getting into the YubiKey PIN and touching the key, so Binance clearly recognizes the YubiKey during sensitive operations.

YubiKey verification

FIDO2 is enabled and dealing normally.

ykman information:

Gadget sort: YubiKey 5 NFC Firmware version: 5.7.four FIDO2: Enabled 

Resident credentials stored on the key:

google.com login.microsoft.com reddit.com 

No Binance credential is listed.

Other websites (Google, Microsoft, Reddit) work appropriately with the identical YubiKey.

What I've already examined

  • Eliminated and recreated the key multiple occasions.
  • Tried with the important thing already inserted and inserted in the course of the course of.
  • Examined with both Brave and Chromium.
  • Similar outcome each time.

Question

Has anybody else on Linux skilled this?

Might this be a Binance WebAuthn concern (credential creation not completing appropriately or RP ID mismatch), or is there a recognized compatibility difficulty with Linux browsers and Binance passkeys?

Any perception from the Binance group or users who've successfully configured a YubiKey on Linux can be drastically appreciated.

submitted by /u/machin_bidule
[link] [comments]
Get BONUS $200 for FREE!

You can get bonuses upto $100 FREE BONUS when you:
πŸ’° Install these recommended apps:
πŸ’² SocialGood - 100% Crypto Back on Everyday Shopping
πŸ’² xPortal - The DeFi For The Next Billion
πŸ’² CryptoTab Browser - Lightweight, fast, and ready to mine!
πŸ’° Register on these recommended exchanges:
🟑 Binance🟑 Bitfinex🟑 Bitmart🟑 Bittrex🟑 Bitget
🟑 CoinEx🟑 Crypto.com🟑 Gate.io🟑 Huobi🟑 Kucoin.



Comments