Um what... your telling me I can just use my yubikey as a nostr signing device...
I have no idea what this thing is but I plugged a yubikey into the app and it did generate and save a nostr key
Login to reply
Replies (6)
wait what
I thought Yubikeys were pwned.
Pwned by?
No. There’s a version of yubikey with a vulnerability but it’s a long shot vulnerability and they patched it in new version
https://www.yubico.com/support/security-advisories/ysa-2024-03/
The attacker requires physical ownership of the yubikey however so it's more like a wrench attack in some ways.
Thanks.