Couple of things I'm seeing people miss on the #yubikey vuln:- Newer Yubikey 5 devices aren't affected (past rev 5.7.0 which was released in May 2024) so if your threat model includes being directly targeted for theft and cloning of a Yubikey you can g...
-
Couple of things I'm seeing people miss on the #yubikey vuln:
- Newer Yubikey 5 devices aren't affected (past rev 5.7.0 which was released in May 2024) so if your threat model includes being directly targeted for theft and cloning of a Yubikey you can get a new one and it's not impacted. Will another side-channel be discovered in the future? Who knows, hope not.
- The equipment used against the yubikey was actually 30k€ but they are confident they could do it on a much cheaper oscilloscope.. 1/x
Copyright © 2024 NodeBB | Contributors