Matthew Garrett on Nostr: Why clone a yubikey when you can simply steal it and leave an identical looking one ...
Why clone a yubikey when you can simply steal it and leave an identical looking one that just doesn't work and the user is just going to be confused for a bunch of time without realising that someone else has their 2FA token now
Published at
2024-09-04 09:08:10Event JSON
{
"id": "f64601805ae883c231682dd756c30f43d4190649b8c4229637d90a23d2d36d1e",
"pubkey": "90526f218e9e8ff28dc76e5348fedf9390f233c9994ab0344624f47b28a13a36",
"created_at": 1725440890,
"kind": 1,
"tags": [
[
"proxy",
"https://nondeterministic.computer/@mjg59/113078494207420111",
"web"
],
[
"proxy",
"https://nondeterministic.computer/users/mjg59/statuses/113078494207420111",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://nondeterministic.computer/users/mjg59/statuses/113078494207420111",
"pink.momostr"
],
[
"-"
]
],
"content": "Why clone a yubikey when you can simply steal it and leave an identical looking one that just doesn't work and the user is just going to be confused for a bunch of time without realising that someone else has their 2FA token now",
"sig": "3e297d5318799795294653ee3473cc5351019252421639a8be243315b829d2fcdfb5d3056c188cca567ec3b6a0fbc851d88b6b34cd4a05741ecd515c39bb07fa"
}
