Conversation

Notices

1. Embed this notice
   feld (feld@bikeshed.party)'s status on Saturday, 17-Jun-2023 22:45:14 JST feld

   in reply to

   • Mike Sheward
   I used to do this all the time when I worked at Ace
   • Embed this notice
     Mike Sheward (secureowl@infosec.exchange)'s status on Saturday, 17-Jun-2023 22:45:15 JST Mike Sheward

     I keep forgetting I need to disclose a vulnerability to all physical key manufacturers. Essentially, it's possible to bypass the 'do not duplicate' message stamped into certain keys by taking them to a hardware store and asking a person who works there to duplicate them.