News for hackers. Stuff that matters.
Re:Ask HN: Why is WebAuthn so slow to take off? by crote on Monday April 24, 2023 @06:05AM (#35685594)
Those bruteforce protections aren't really worth a lot in practice. If you have physical access to the device, you will eventually be able to find a way to glitch it - as things like Cellebrite have already proven for the iPhone.
Re:Ask HN: Why is WebAuthn so slow to take off? by m-p-3 on Monday April 24, 2023 @02:21PM (#35691215)
Is there any demonstrated case where someone was able to exfiltrate secrets from a Yubikey secure element?