Here's a good write-up of SDA (very vulnerable to the yes-card) and DDA (not vulnerable to the yes-card if authenticated online, but still vulnerable if authent

Here's a good write-up of SDA (very vulnerable to the yes-card) and DDA (not vulnerable to the yes-card if authenticated online, but still vulnerable if authenticated offline due to a bad protocol): https://www.lightbluetouchpaper.org/2009/08/25/defending-against-wedge-attacks/ https://www.lightbluetouchpaper.org/2009/08/25/defending-aga...