3 ms·

> the US custom detained my electronics, including a Yubikey Can you elaborate on what happened? I know that it's theoretically possible, but I thought that:

> the US custom detained my electronics, including a Yubikey Can you elaborate on what happened? I know that it's theoretically possible, but I thought that: 1- They would potentially detain only devices that they can extract information out of (even if encrypted), like a laptop or some hard disk... Yubikey (at least the old U2F-only ones) don't have anything that you can extract 2- They would eventually return the device to you (unless guilty of some national security violation?) Am I mistaken on both counts?

vanchor3 2y ago
If they just seize it, it will typically be returned at some point. If they decide it's subject to forfeiture, it is now their property. You can contest this with the forfeiture department but I guess if they decide the item is guilty of a crime or other excuses to keep it there's nothing you can do.
- plagiarist 2y ago
  That's right. It will be United States v. Some Person's Yubikey. And you can hire it a lawyer if you want, because they will NOT give it a public defender. Massive violation of Constitutional rights if you ask me.
cvhc 2y ago
For 1, tbh I don't know the rules. technically it was a regular model and can store some data. Or maybe they simply suspected it's a usb disk. And 2 was true. But it was after weeks, and of course I didn't wait until then to reset my account credentials.
heavyset_go 2y ago
> Yubikey (at least the old U2F-only ones) don't have anything that you can extract Newer Yubikeys hold secrets that, if exfiltrated, give you access to accounts. I assume that if it doesn't already exist, there will be a Cellebrite-like device that governments can plug Yubikeys into to dump keys quickly like they're able to with cell phones.
- lxgr 2y ago
  The entire point of Yubikeys is that such a device should be impossible, and vice versa, if such a device were to exist, the Yubikey is nothing but an expensive USB flash drive.
  - schoen 2y ago
    It should also be a dramatically smaller attack surface than a smartphone!
vaylian 2y ago
> 2- They would eventually return the device to you (unless guilty of some national security violation?) "Eventually" is not good enough. People take things with them on their trips, because they expect to use these things while they are traveling/doing work at a remote location. Imagine you need to do some work on a remote site and you can't log in to your company's network, because the TSA has taken away your key so that they can inspect it.

vanchor3 2y ago

If they just seize it, it will typically be returned at some point. If they decide it's subject to forfeiture, it is now their property. You can contest this with the forfeiture department but I guess if they decide the item is guilty of a crime or other excuses to keep it there's nothing you can do.

plagiarist 2y ago
That's right. It will be United States v. Some Person's Yubikey. And you can hire it a lawyer if you want, because they will NOT give it a public defender. Massive violation of Constitutional rights if you ask me.

cvhc 2y ago

For 1, tbh I don't know the rules. technically it was a regular model and can store some data. Or maybe they simply suspected it's a usb disk. And 2 was true. But it was after weeks, and of course I didn't wait until then to reset my account credentials.

heavyset_go 2y ago

> Yubikey (at least the old U2F-only ones) don't have anything that you can extract Newer Yubikeys hold secrets that, if exfiltrated, give you access to accounts. I assume that if it doesn't already exist, there will be a Cellebrite-like device that governments can plug Yubikeys into to dump keys quickly like they're able to with cell phones.

lxgr 2y ago
The entire point of Yubikeys is that such a device should be impossible, and vice versa, if such a device were to exist, the Yubikey is nothing but an expensive USB flash drive.
- schoen 2y ago
  It should also be a dramatically smaller attack surface than a smartphone!

vaylian 2y ago

> 2- They would eventually return the device to you (unless guilty of some national security violation?) "Eventually" is not good enough. People take things with them on their trips, because they expect to use these things while they are traveling/doing work at a remote location. Imagine you need to do some work on a remote site and you can't log in to your company's network, because the TSA has taken away your key so that they can inspect it.