https://tldr.tech/infosec/2024-09-04
TLDR Information Security 2024-09-04
YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel (3 minute read)
The YubiKey 5 hardware token for two-factor authentication has a cryptographic flaw that makes it vulnerable to cloning attacks when physically accessed by an attacker. Yubico has confirmed that all YubiKey 5 models are susceptible to cloning due to a side channel vulnerability in the Infineon microcontroller used in various authentication devices. Updating firmware on affected YubiKeys is not possible, leaving them permanently vulnerable to potential attacks.
# – # – # – # – #
Guess that you can toss these in the trash can or trash bin!
Still think that the authenticator app of a phone is the best two factor authentication technique.
—30—
Reinke Faces Life 