News for hackers. Stuff that matters.

A comment on OnlyKey: Open-Source Alternative to YubiKey. Parent comment

Re:OnlyKey: Open-Source Alternative to YubiKey by ncmncm on Thursday December 26, 2019 @03:35PM (#21886529)
That all sounds to me like security theater. It would not increase my confidence in the device, its firmware, or its design.
[ Parent | on HN ]
Re:OnlyKey: Open-Source Alternative to YubiKey by nine_k on Thursday December 26, 2019 @10:32PM (#21888951)
Why?

Backdooring a shipment of security tokens could open interesting possibilities at a relatively low cost. Or the government may force you if you happen to be in Australia.

Flashing your own firmware which you have checked (or at least checked its signature) may make sense.

[ Parent | on HN ]