Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://abyss.fun/users/guskma/statuses/113076544975789422">ぐすくま@わかりみ (guskma@abyss.fun)'s status on Wednesday, 04-Sep-2024 09:56:35 JST</a><a href="https://abyss.fun/@guskma" title="guskma@abyss.fun"><img src="https://gnusocial.jp/avatar/506-48-20231105121844.webp" width="48" height="48" alt="ぐすくま@わかりみ" style="position: absolute; left: 0; top: 0;">ぐすくま@わかりみ</a><div><ul><li></ul></div></section><article><p>あら</p><p>＞Xユーザーのkokumօtօさん: 「YubiKey 5にクローン作成攻撃が可能な脆弱性。NinjaLab社報告。サイドチャネル攻撃で、物理的に保有下で、特殊な機器で挙動を観測することでECDSA秘密鍵を抽出可能。ファームウェアバージョン5.7より前が脆弱。チップ製造元Infineon社提供の暗号ライブラリの実装に起因。 <a href="https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/" rel="nofollow noreferrer">https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/</a> 」 / X<br><a href="https://x.com/__kokumoto/status/1831080608967307409" rel="nofollow noreferrer">https://x.com/__kokumoto/status/1831080608967307409</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3610770#notice-7081041">In conversation</a><time datetime="2024-09-04T09:56:35+09:00" title="Wednesday, 04-Sep-2024 09:56:35 JST">about 3 months ago</time> <span>from <span><a href="https://abyss.fun/@guskma/113076544975789422" rel="external" title="Sent from abyss.fun via ActivityPub">abyss.fun</a></span></span><a href="https://abyss.fun/@guskma/113076544975789422">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cdn.arstechnica.net</div><h5><a href="https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/">YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel</a></h5><div></div></header><div>Sophisticated attack breaks security assurances of the most popular FIDO key.</div><footer></footer></article></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3120129">Untitled attachment</a></label><br></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
ぐすくま@わかりみ (guskma@abyss.fun)'s status on Wednesday, 04-Sep-2024 09:56:35 JSTぐすくま@わかりみ
- かき@GNUsocialJP
あら
＞Xユーザーのkokumօtօさん: 「YubiKey 5にクローン作成攻撃が可能な脆弱性。NinjaLab社報告。サイドチャネル攻撃で、物理的に保有下で、特殊な機器で挙動を観測することでECDSA秘密鍵を抽出可能。ファームウェアバージョン5.7より前が脆弱。チップ製造元Infineon社提供の暗号ライブラリの実装に起因。 https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/ 」 / X
https://x.com/__kokumoto/status/1831080608967307409
In conversationabout 3 months ago from abyss.funpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.arstechnica.net
  YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel
  Sophisticated attack breaks security assurances of the most popular FIDO key.
2. Untitled attachment

Public

Embed Notice

HTML Code

Corresponding Notice