YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

#yubikey #mfa_yubikey


🥲👀 nostr:npub1casacasahesdrpu6npfth2t0ae37a2cdwwg3c4fkt30v7gzffx3q7wtzdc


Seems very niche but nevertheless


Required 10h access to the victim's Yubikey, to know the exact account targeted, 11'000$ of equipement, disassembling the key and replacing it in a new casing after the cloning.

I guess most people are fine.


Doesn’t really matter; this is the second time Infineon fucked up basic cryptography