this post was submitted on 03 Sep 2024
56 points (95.2% liked)

Hardware

652 readers
330 users here now

All things related to technology hardware, with a focus on computing hardware.

Rules (Click to Expand):

  1. Follow the Lemmy.world Rules - https://mastodon.world/about

  2. Be kind. No bullying, harassment, racism, sexism etc. against other users.

  3. No Spam, illegal content, or NSFW content.

  4. Please stay on topic, adjacent topics (e.g. software) are fine if they are strongly relevant to technology hardware. Another example would be business news for hardware-focused companies.

  5. Please try and post original sources when possible (as opposed to summaries).

  6. If posting an archived version of the article, please include a URL link to the original article in the body of the post.

Some other hardware communities across Lemmy:

Icon by "icon lauk" under CC BY 3.0

founded 1 year ago
MODERATORS
Alphane_Moon
CSFFlame
56
YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel (arstechnica.com)
submitted 2 months ago* (last edited 2 months ago) by GreenEngineering3475 to c/hardware
8 comments fedilink hide all child comments
 

Edit: Yubico has issued a security advisory on the vulnerability https://www.yubico.com/support/security-advisories/ysa-2024-03/

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 7 points 2 months ago

Its not much of a vulnerability, like locks, its not if it can be picked, it is how difficult it is to be picked, but the difference here is that the vulnerability is that a nation state actor, or a high capability actor can compromise it, and "it" being the thing that keeps your accounts safe.

So this is like the lock that protects all your accounts can be shimmed if it ever gets out of your control type of an issue, so not to stop using them, but to keep them secured or on your person at all times.

I hope YubiKey offers a fair upgrade program for their next series of keys and maybe a new FIDO Standard.