Re:Everykey – The Master Key to Your Phone, Laptop, Website ...
by isomorphic on Friday February 05, 2016 @11:36PM
(#11046569)
The Everykey device holds a decryption key (or key-equivalent) for your keychains, and it has over-the-air upgradeablefirmware? Even if the firmware is signed, and the upgrade procedure is password-protected, the feature may expose the device to a variety of different attacks.
(Not to mention hardware attacks, since even if the device has a secure element, it has to send key material back to the device with the keychain.)
(Not to mention hardware attacks, since even if the device has a secure element, it has to send key material back to the device with the keychain.)