4 ms·

> Yubikey (at least the old U2F-only ones) don't have anything that you can extract Newer Yubikeys hold secrets that, if exfiltrated, give you access to accoun

> Yubikey (at least the old U2F-only ones) don't have anything that you can extract Newer Yubikeys hold secrets that, if exfiltrated, give you access to accounts. I assume that if it doesn't already exist, there will be a Cellebrite-like device that governments can plug Yubikeys into to dump keys quickly like they're able to with cell phones.

lxgr 2y ago
The entire point of Yubikeys is that such a device should be impossible, and vice versa, if such a device were to exist, the Yubikey is nothing but an expensive USB flash drive.
- schoen 2y ago
  It should also be a dramatically smaller attack surface than a smartphone!