Get the latest tech news
YubiKeys have an unfixable security flaw — but it’s difficult to exploit
Almost every older YubiKey token is impacted.
By Jess Weatherbed, a news writer focused on creative industries, computing, and internet culture. YubiKey manufacturer Yubico says the severity of the side-channel vulnerability is “moderate” but is difficult to exploit, partly because two-factor systems rely upon something the user has and something only they should know. “Depending on the use case, the attacker may also require additional knowledge including username, PIN, account password, or authentication key.” But those aren’t necessarily deterrents to a highly motivated individual or state-sponsored attack.
Or read this on The Verge
