4 ms·
> If they want to give it back to you, they'll need to reassemble it. Or just give you back a different yubikey that is cloned from the original.
by aidenn0 2y ago
> If they want to give it back to you, they'll need to reassemble it.
Or just give you back a different yubikey that is cloned from the original.
- acdha 2y agoYou can’t do that without the same assembly issue. Yubikeys don’t let you generate the FIDO2 keys at all and I believe there’s a flag on x509 keys which were imported rather than generated on the device.
- xvector 2y agoYou would replace it with a dummy that unlocks that functionality but looks physically the same.
- acdha 2y agoThe “looks physically the same” part is the problem I was referring to: this attack needs a lab and some time. If they have to add reprogramming a key and weathering it to look like yours to the task it’s certainly not impossible but it moves even further into “are you at war with a nation-state?” territory where the attacks are both unlikely to be worth the cost or easier than alternatives. I’m not saying it’s not possible but 99% of normal people are really only at risk of online attacks or physical attacks which won’t be sophisticated stealth operations but more along the lines of “you’re sending me Bitcoin or I’m shooting your dog”.
- wbl 2y agoGet Chinese knockoff and some coins in a tumbler
- a1o 2y agoThis is more probable, yes