SECURITY:  YubiKeys are vulnerable to cloning attacks

Wednesday, September 4, 2024

https://tldr.tech/infosec/2024-09-04

TLDR Information Security 2024-09-04

https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel (3 minute read)

The YubiKey 5 hardware token for two-factor authentication has a cryptographic flaw that makes it vulnerable to cloning attacks when physically accessed by an attacker. Yubico has confirmed that all YubiKey 5 models are susceptible to cloning due to a side channel vulnerability in the Infineon microcontroller used in various authentication devices. Updating firmware on affected YubiKeys is not possible, leaving them permanently vulnerable to potential attacks.

# – # – # – # – # 

Guess that you can toss these in the trash can or trash bin!

Still think that the authenticator app of a phone is the best two factor authentication technique.

—30—


GOVEROTRAGEOUS: “Pass the trash” right into a jail cell

Wednesday, September 4, 2024

https://www.realclearinvestigations.com/articles/2024/08/28/the_sad_lesson_of_school_sex-abuse_101_its_pass_the_trash_not_catch_the_trash_1053859.html?mc_cid=08b6b4d1e0

The Sad Lesson of School Sex Abuse: It’s Pass the Trash, Not Catch the Trash (Part 3 of a Series)
By James Varney, RealClearInvestigations
August 28, 2024

*** begin quote ***

Ashley quickly told her mother and school officials, including a school security officer she confused with a police officer. They assured her the matter would be handled. But Allen was never arrested or charged with any crime. He resigned quietly from Little Axe in 2002. In the years since, he has coached or taught at seven other Oklahoma high schools, according to state records, a development Ashley found appalling. 

“I watched them pass the trash right in front of me,” said the woman, now Ashley Rolen, 39, an Oklahoma City entrepreneur married to a pastor. She is working to publicize the problem of sexual misconduct, particularly among K-12 school employees. “My story is significant but not unique,” she notes ruefully.

*** end quote ***

Sorry, but this should NOT happen. All resignations, “quiet” or otherwise, should be reported to the press and investigated by the police.  Bring the bureaucrats (i.e., principal; the vice; and anyone else in the chain of command) down to the police station, put them in an interrogation room, and ask “routine questions”.  Anyone that doesn’t cooperate is immediately suspended pending an appearance at a Grand Jury.  If crossing state lines is involved the FBI should be conducting the investigation.  I’d insist on an audio and video record be kept.  

This <synonym for excrement> would quickly stop.  No “education” bureaucrat would risk their job, pension, and possible jail time to cover for a criminal.  I suspect that there would enthusiastic cooperation.

And, anyone convicted or loses misconduct suit in court is FOREVER banned from school or Gooferment employment at any level.  

Argh!

—30—