Updated:07:43 AM EST Feb 27


this is ggmania.com subsite Hackers can clone Google Titan 2FA keys - TechAmok

Hackers can clone Google Titan 2FA keys - [security]
05:04 PM EST - Jan,08 2021 - post a comment

Two-factor authentication, or 2FA, is a method that makes account takeovers much harder to pull off. Instead of using only a password to prove someone is authorized to access an account, 2FA requires a second factor, such as a one-time password, possession of a physical object, or a fingerprint or other biometric. Physical keys are among the - if not the - most secure forms of 2FA because they store the long-term secret that makes them work internally, and only output non-reusable values. The secret is also impossible to phish. Physical keys are also more convenient, since they work on all major operating systems and hardware. The Titan vulnerability is one of the only weaknesses ever to be found in a mainstream 2FA key. However improbable, a successful real-world exploit would completely undermine the security assurances the thumb-size devices provide. The NinjaLab researchers are quick to point out that despite the weakness, it's still safer to use a Titan Security Key or another affected authentication device to sign in to accounts than not to.

The cloning works by using a hot air gun and a scalpel to remove the plastic key casing and expose the NXP A700X chip, which acts as a secure element that stores the cryptographic secrets. Next, an attacker connects the chip to hardware and software that take measurements as the key is being used to authenticate on an existing account. Once the measurement-taking is finished, the attacker seals the chip in a new casing and returns it to the victim. Extracting and later resealing the chip takes about four hours. It takes another six hours to take measurements for each account the attacker wants to hack. In other words, the process would take 10 hours to clone the key for a single account, 16 hours to clone a key for two accounts, and 22 hours for three accounts.


Add your comment (free registrationrequired)

Short overview of recent news articles

Feb,27 2021 Coinbase Names BTC Creator Satoshi Nakamoto As Potential Risk
Feb,27 2021 Customers are reporting credit-card payment crashes across the US
Feb,26 2021 ARMY OF THE DEAD Trailer (2021)
Feb,26 2021 SHADOW AND BONE Trailer (2021)
Feb,26 2021 NEW Mastercard Offers FREE XRP
Feb,25 2021 Three Arrows Capital CEO Says Bitcoin Could Hit $2,500,000
Feb,25 2021 Motorcyclist Collides With Car
Feb,24 2021 Denuvo Cracker EMPRESS "Arrested"
Feb,24 2021 eToro down as crypto, global equities turn volatile
Feb,23 2021 AMD Releases Radeon Software 21.2.3 Drivers
Feb,23 2021 Massive Bitcoin Whale Transactions Move More Than $1,9T in Crypto
Feb,22 2021 Institutional Bitcoin Investors Briefly Lose $13 Billion in Market
Feb,22 2021 MoneyGram Drops Ripple Citing SEC Lawsuit
Feb,22 2021 Perseverance Rover's Descent and Touchdown on Mars
Feb,22 2021 Engineer Demonstrates How To Pull Off The 'Sitting In the Air
Feb,22 2021 Michael Burry Issues Warning on Future of Bitcoin and Gold
Feb,22 2021 Two Whales Just Withdrew a Billion Dollars From Coinbase
Feb,22 2021 AMD releases statement regarding USB problems on 500-series chipset
Feb,21 2021 Ripple now registered as a Wyoming business
Feb,21 2021 Pfizer vaccine doesn't need ultra-cold storage after all, company
Feb,21 2021 Samsung Adds New Features to Older Galaxy Phones
Feb,21 2021 Ripple XRP to +$1000 In 2021?? Warren Baffet predicts the future!
Feb,21 2021 Another Weekend, Another All-Time High: Bitcoin Hits $57k
Feb,21 2021 NVIDIA GeForce RTX 3060 Anti-Mining Feature
Feb,20 2021 Mortal Kombat 2021 - Official Trailer
Feb,20 2021 Dad Level: 9000
Feb,19 2021 Ripple Is Working With Central Banks To Develop Digital Assets
Feb,19 2021 Bill Gates Says He's Neutral On Bitcoin
Feb,19 2021 SEC files amended complaint against Ripple - Hogan's legal take
Feb,19 2021 NASA successfully lands Perseverance rover on Mars
Feb,18 2021 Android 12 release date
Feb,18 2021 Some of these crypto projects aren't even trying to look legit
Feb,18 2021 Epic Cycling on Ice
Feb,18 2021 Debunking Can you make ICE in a microwave?
Feb,18 2021 New York Files Fraud Charges Against Crypto Firm Coinseed
Feb,17 2021 Disney's Cruella - Official Trailer
Feb,17 2021 Coinbase, Readying for Public Listing, Gets $77B Valuation
Feb,17 2021 Bullish Coinbase Premium Returns as Bitcoin Reaches $51,400
Feb,16 2021 The Claudia Conway Audition From 'American Idol'
Feb,16 2021 Bitcoin Price Breaks $50,000 Barrier
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs