3 ms·
It would be difficult, but the one thing I've learned to trust in security is that there's no such thing as a system that can't be broken. For U2F, the first t
by Filligree 8y ago
It would be difficult, but the one thing I've learned to trust in security is that there's no such thing as a system that can't be broken.
For U2F, the first thing that comes to mind is timing channels, or perhaps building in a radio and letting anyone nearby use the key as if it were theirs.
- ac29 8y agoThe existence of a hidden radio should be trivial to confirm - at minimum it would require a battery and an antenna. If I we're the paranoid type, I'd avoid bluetooth security keys all together. NFC should be fine for use with a mobile phone, and while there are attacks that let you read NFC from a few meters away, if you credibly think you have an adversary who can identify you in public, and has this type of specialized hardware, you're dealing with someone who would have a much easier time just throwing you in the back of a van to extract whatever they wanted out of you.