3 ms·

While I'm not a fan of closed-source firmware, there's something nice about the firmware being indelible.

• toastal 5y ago
  Eh. In the case of OnlyKey, they can ship a version without all the encryption to get past customs or whatever in places that ban it, and you easily flash your own over it. If the firmware is immutable you can't do this--or fix bugs, or add new features--which could turn them into e-waste sooner.
  • fullstop 5y ago
    It is impossible to load compromised firmware on a Yubikey after it has been manufactured. You can't say that for OnlyKey. One laptop contains more e-waste than dozens (hundreds?) of Yubikeys, so there's much lower hanging fruit on that tree.
    • toastal 5y ago
      Who is to say the NSA or other agency didn't load a compromised firmware from the factory. With OnlyKey, I can build and load the firmware myself so I wouldn't need to trust it.