MultiversX Tracker is Live!

Possible WebAuthn / Passkey bug on Linux with YubiKey 5 NFC

Binance

Cryptocoins Exchanges / Binance 52 Views

I'm experiencing what appears to be a WebAuthn/Passkey problem on Binance and want to know if anybody can reproduce it.

Setting

  • OS: Linux Mint 22.3
  • YubiKey: YubiKey 5 NFC
  • Firmware: 5.7.four
  • Browsers tested:
    • Courageous 1.92.143 (Chromium 150.zero.7871.182)
    • Chromium 150.zero.7871.124
  • Both browsers produce the exact same conduct.

Steps to reproduce

  1. Log in to Binance.
  2. Go to Security β†’ Passkeys / Security Keys.
  3. Add a brand new security key utilizing the YubiKey.
  4. The browser:
    • asks for the YubiKey FIDO2 PIN,
    • then the YubiKey LED starts blinking,
    • I contact the safety key,
    • Binance stories that the important thing has been efficiently added.
  5. Binance instantly sends the affirmation e mail saying that a new passkey/security key has been added.

Every little thing seems to finish efficiently.

Drawback

After logging out:

  1. I enter my e mail tackle.
  2. I click Proceed with passkey.
  3. The browser again asks for the YubiKey PIN.
  4. The YubiKey LED blinks.
  5. I contact the key.
  6. The browser returns:

Authentication all the time fails.

Further observations

  • Binance displays the registered credential as:

Safety Key on Linux Cross Gadget 

which seems unusual for a USB YubiKey.

  • Deleting the registered key from Binance additionally requires getting into the YubiKey PIN and touching the important thing, so Binance clearly acknowledges the YubiKey during delicate operations.

YubiKey verification

FIDO2 is enabled and working normally.

ykman information:

System sort: YubiKey 5 NFC Firmware version: 5.7.4 FIDO2: Enabled 

Resident credentials saved on the important thing:

google.com login.microsoft.com reddit.com 

No Binance credential is listed.

Other websites (Google, Microsoft, Reddit) work appropriately with the same YubiKey.

What I've already tested

  • Removed and recreated the key multiple occasions.
  • Tried with the important thing already inserted and inserted in the course of the course of.
  • Tested with each Courageous and Chromium.
  • Similar end result every time.

Query

Has anyone else on Linux experienced this?

Might this be a Binance WebAuthn challenge (credential creation not completing appropriately or RP ID mismatch), or is there a recognized compatibility difficulty with Linux browsers and Binance passkeys?

Any perception from the Binance group or customers who have efficiently configured a YubiKey on Linux can be significantly appreciated.

submitted by /u/machin_bidule
[link] [comments]
Get BONUS $200 for FREE!

You can get bonuses upto $100 FREE BONUS when you:
πŸ’° Install these recommended apps:
πŸ’² SocialGood - 100% Crypto Back on Everyday Shopping
πŸ’² xPortal - The DeFi For The Next Billion
πŸ’² CryptoTab Browser - Lightweight, fast, and ready to mine!
πŸ’° Register on these recommended exchanges:
🟑 Binance🟑 Bitfinex🟑 Bitmart🟑 Bittrex🟑 Bitget
🟑 CoinEx🟑 Crypto.com🟑 Gate.io🟑 Huobi🟑 Kucoin.



Comments