Hardware

636 readers

120 users here now

All things related to technology hardware, with a focus on computing hardware.

Rules (Click to Expand):

Follow the Lemmy.world Rules - https://mastodon.world/about
Be kind. No bullying, harassment, racism, sexism etc. against other users.
No Spam, illegal content, or NSFW content.
Please stay on topic, adjacent topics (e.g. software) are fine if they are strongly relevant to technology hardware. Another example would be business news for hardware-focused companies.
Please try and post original sources when possible (as opposed to summaries).
If posting an archived version of the article, please include a URL link to the original article in the body of the post.

Some other hardware communities across Lemmy:

Augmented Reality - !augmented_reality@lemmy.world
Gaming Laptops - !gaminglaptops@lemmy.world
Laptops - !laptops@lemmy.world
Linux Hardware - !linuxhardware@programming.dev
Mechanical Keyboards - !mechanicalkeyboards@kbin.social
Microcontrollers - !microcontrollers@lemux.minnix.dev
Monitors - !monitors@lemm.ee
Retro Computing - !retrocomputing@lemmy.sdf.org
Single Board Computers - !sbcs@lemux.minnix.dev
Virtual Reality - !virtualreality@lemmy.world

Icon by "icon lauk" under CC BY 3.0

founded 1 year ago

MODERATORS

CSFFlame@lemmy.world

Alphane_Moon@lemmy.world

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel (arstechnica.com)

submitted 2 months ago* (last edited 2 months ago) by GreenEngineering3475@lemmy.world to c/hardware@lemmy.world

8 comments fedilink hide all child comments

Edit: Yubico has issued a security advisory on the vulnerability https://www.yubico.com/support/security-advisories/ysa-2024-03/

you are viewing a single comment's thread
view the rest of the comments

[–] Alphane_Moon@lemmy.world 29 points 2 months ago (2 children)

“The attacker would need physical possession of the YubiKey, Security Key, or YubiHSM, knowledge of the accounts they want to target, and specialized equipment to perform the necessary attack. Depending on the use case, the attacker may also require additional knowledge including username, PIN, account password, or authentication key.”

[–] jelloeater85@lemmy.world 10 points 2 months ago

Seems like a "blast door" type problem...

[–] 01189998819991197253@infosec.pub 4 points 2 months ago

That sounds like the attacker would need to basically already know how to unlock it...