respectfully disagree. Per Michał "rysiek" Woźniak · 🇺🇦 (npub1afm…5gp4) :
But the attack *requires*:
👉 *physically opening the YubiKey enclosure*
👉 physical access to the YubiKey *while it is authenticating*
👉 non-trivial electronics lab equipment
There’s nothing brief (or cheap) about that.
This is a proof of execution that #yubikey should fix, not a global panic alert.
David Koff (he/him) /
npub1c0…cy9rt
2024-09-03 21:42:15
in reply to nevent1q…cfpt
Author Public Key
npub1c06z7fjvqwg3fhz27jedr76mchsmutgwlf820yd8hn769ea9tf6q7cy9rtSeen on
wss://relay.momostr.pinkPublished at
2024-09-03 21:42:15Event JSON
{
"id": "4fa0befc3cddc5f8135e5c4eeebe37d20ca3c746077175ab41374721707286d7",
"pubkey": "c3f42f264c039114dc4af4b2d1fb5bc5e1be2d0efa4ea791a7bcfda2e7a55a74",
"created_at": 1725399735,
"kind": 1,
"tags": [
[
"p",
"ea77f5584eeec06087f47a9fe82692723f1feb889eaf3e3b885997ec2e776aec"
],
[
"p",
"147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18"
],
[
"proxy",
"https://me.dm/@thetechtutor/113075797036453617",
"web"
],
[
"e",
"617a2e8140debda9f20ff91a38e3e4f7671673a460195499fca923d0535ccbb1",
"",
"root",
"147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18"
],
[
"t",
"yubikey"
],
[
"proxy",
"https://me.dm/users/thetechtutor/statuses/113075797036453617",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://me.dm/users/thetechtutor/statuses/113075797036453617",
"pink.momostr"
],
[
"-"
]
],
"content": "respectfully disagree. Per nostr:npub1afml2kzwamqxppl50207sf5jwgl3l6ugn6hnuwugtxt7ctnhdtkqjq5gp4 :\n\nBut the attack *requires*:\n\n👉 *physically opening the YubiKey enclosure*\n\n👉 physical access to the YubiKey *while it is authenticating*\n\n👉 non-trivial electronics lab equipment\n\nThere’s nothing brief (or cheap) about that. \n\nThis is a proof of execution that #yubikey should fix, not a global panic alert.",
"sig": "001737db5613e233a98dde3330fb7cb406ac66563ea5f58035ed4c0925a1dee292db57f73f7198928143b47eea3d277177f4afdb56ef88795600267ab3f159fa"
}