News for hackers. Stuff that matters.
Re:Designing Solo, a new U2F/FIDO2 Token by zorked on Friday August 24, 2018 @05:33AM (#17833810)
If you have malware on the PC you can still be MITM'd when you actually, say, access your bank.
Re:Designing Solo, a new U2F/FIDO2 Token by consp on Friday August 24, 2018 @06:15AM (#17833992)
Not if the encrypted data is displayed by the crypto chip, via a round trip between the bank and the chip (encrypted). Yes, technically it can be done, but this requires physical access to the device.