Sophisticated attack breaks security assurances of the most popular FIDO key.
  • @[email protected]English
    33•4 months ago

    TLDR; the attack is very sophisticated, require hardware access and specialized tools. On the other hand its not possible to patch the vulnerability

    • @[email protected]English
      4•4 months ago

      To add:

      All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable.

      So if you bought your key from June onward, you are most likely in the clear.

  • NoraEnglish
    6•4 months ago

    I have two of these is there anything else more secure?