Yubico: Secure Hardware vs. Open Source

Re:Yubico: Secure Hardware vs. Open Source by davideous on Monday May 16, 2016 @11:37PM (#11711218)

> They could prevent bad firmware updates by wiping keys on upgrade

This does not close the attack vector of someone intercepting the device before you get it and surreptitiously installing firmware with a backdoor.

[ Parent | on HN ]

Re:Yubico: Secure Hardware vs. Open Source by mpeg on Tuesday May 17, 2016 @04:43AM (#11712075)

And then you are fucked because you can't update the firmware to the trusted, signed open source version.

[ Parent | on HN ]

Re:Yubico: Secure Hardware vs. Open Source by discreditable on Tuesday May 17, 2016 @01:03AM (#11711452)

How do they do that to begin with?

[ Parent | on HN ]

Re:Yubico: Secure Hardware vs. Open Source by e12e on Tuesday May 17, 2016 @03:59AM (#11711960)

There's been various news on this, like (first Google search I came across): http://www.geek.com/news/nsas-top-hacking-unit-intercepts-ma...

[ Parent | on HN ]

Re:Yubico: Secure Hardware vs. Open Source by jacobush on Tuesday May 17, 2016 @03:29AM (#11711869)

Modify the hardware to look the same but with added features. Like a radio transmitter.

[ Parent | on HN ]