Some thoughts on the YubiKey EUCLEAK Vulnerability


Photo of electrical equipment placed very close to a circuit board.

It looks like everyone's favourite FIDO token provider might have an unpatchable vulnerability! Much Sturm und Drang from the usual sources. But how bad is it really? Not so bad - but it does expose some weaknesses in the very idea of having physical tokens. First up, as the research paper's abstract says: The attack […]

Continue reading →