Yubikeys are intended to block phishing. This attack requires physical access. IE: If you're "worth it" to target IRL, you shouldn't use a Yubikey to begin wit

Yubikeys are intended to block phishing. This attack requires physical access. IE: If you're "worth it" to target IRL, you shouldn't use a Yubikey to begin with. Someone can swap your spare and you won't realize it until too late.