Matthew Garrett on Nostr: Why clone a yubikey when you can simply steal it and leave an identical looking one ...
Why clone a yubikey when you can simply steal it and leave an identical looking one that just doesn't work and the user is just going to be confused for a bunch of time without realising that someone else has their 2FA token now
Published at
2024-09-04 09:08:10Event JSON
{
"id": "d02fb26b9aa8b9d3acbbde3ac44514d7b4f97ff74c1cfe72bba82ecc78921b90",
"pubkey": "ef5e80e6c74387ef14f5c6b89079f22b6847dc14365001c0ed662a20bd891677",
"created_at": 1725440890,
"kind": 1,
"tags": [
[
"proxy",
"https://nondeterministic.computer/users/mjg59/statuses/113078494207420111",
"activitypub"
]
],
"content": "Why clone a yubikey when you can simply steal it and leave an identical looking one that just doesn't work and the user is just going to be confused for a bunch of time without realising that someone else has their 2FA token now",
"sig": "8372b3fe9d8f695d657f68c7ee3036d53946594a4543906118dfa4fce88388d3cefbad90f9039da83a49ccfd6b4529738bace7912bd2c4c26fe6be24543bdb72"
}
