Updated:04:03 PM EST Jan 21


this is ggmania.com subsite Hackers can clone Google Titan 2FA keys - TechAmok

Hackers can clone Google Titan 2FA keys - [security]
05:04 PM EST - Jan,08 2021 - post a comment

Two-factor authentication, or 2FA, is a method that makes account takeovers much harder to pull off. Instead of using only a password to prove someone is authorized to access an account, 2FA requires a second factor, such as a one-time password, possession of a physical object, or a fingerprint or other biometric. Physical keys are among the - if not the - most secure forms of 2FA because they store the long-term secret that makes them work internally, and only output non-reusable values. The secret is also impossible to phish. Physical keys are also more convenient, since they work on all major operating systems and hardware. The Titan vulnerability is one of the only weaknesses ever to be found in a mainstream 2FA key. However improbable, a successful real-world exploit would completely undermine the security assurances the thumb-size devices provide. The NinjaLab researchers are quick to point out that despite the weakness, it's still safer to use a Titan Security Key or another affected authentication device to sign in to accounts than not to.

The cloning works by using a hot air gun and a scalpel to remove the plastic key casing and expose the NXP A700X chip, which acts as a secure element that stores the cryptographic secrets. Next, an attacker connects the chip to hardware and software that take measurements as the key is being used to authenticate on an existing account. Once the measurement-taking is finished, the attacker seals the chip in a new casing and returns it to the victim. Extracting and later resealing the chip takes about four hours. It takes another six hours to take measurements for each account the attacker wants to hack. In other words, the process would take 10 hours to clone the key for a single account, 16 hours to clone a key for two accounts, and 22 hours for three accounts.

Short overview of recent news articles

AMD 21.1.1 Adrenalin driver (Jan,21 2021 )

Former Ripple Advisor Expected to Lead OCC Under Biden (Jan,21 2021 )

Will altcoins like XRP, Monero, Zcash see comeback to pre-2018 (Jan,21 2021 )

Pornhub adds XRP, BNB, USDC, and DOGE to its payment options (Jan,20 2021 )

At Least 25% of Value Deployed in DeFi Will Move Away from Ethereum (Jan,20 2021 )

Brave private browser integrates IPFS support to desktop version (Jan,20 2021 )

Ripple pins hopes on Biden administration as co-founder sells 28M (Jan,20 2021 )

Malwarebytes says it was targeted by SolarWinds hackers too (Jan,20 2021 )

DuckDuckGo Search Engine Surpasses 100 Million Daily Searches (Jan,20 2021 )

TOP UPCOMING SCI-FI MOVIES 2021 (Jan,18 2021 )

Bitfinex Executives Deny Allegations of Issuing USDT to Pump BTC (Jan,18 2021 )

Ripple price analysis: XRP hints at a massive breakout to $0.40 (Jan,18 2021 )

For All Mankind S2 trailer (Jan,18 2021 )

Goldman Sachs to Enter Crypto Market 'Soon' (Jan,17 2021 )

Apple extends free TV+ trials (Jan,16 2021 )

US Fed: CBDC a very high priority to combat bad private sector money (Jan,16 2021 )

WhatsApp delays the enforcement of its new privacy terms by 3 months (Jan,15 2021 )

Almost 100 Million XRP Shifted by Ripple, Bitfinex and Coinbase (Jan,15 2021 )

Ripple Unveils Plans To Expand Its Presence In Europe (Jan,15 2021 )

RMY OF THE DEAD Trailer Teaser (2021) (Jan,15 2021 )

OCC Chief Brian Brooks Is Stepping Down Thursday (Jan,14 2021 )

CHERRY Official Trailer (2021) Tom Holland (Jan,14 2021 )

Samsung's Galaxy S21 Flagships are Prettier and More Affordable (Jan,14 2021 )

BLISS Official Trailer (2021) (Jan,13 2021 )

Japan's FSA Says XRP Not a Security: Report (Jan,13 2021 )

Grayscale starts dissolving XRP trust after SEC deems XRP a security (Jan,13 2021 )

GeForce RTX 3060 in February 2020 (Jan,13 2021 )

Gensler Said to Be Named SEC Chairman: Reuters (Jan,13 2021 )

Intel's Rocket Lake-S Core i9-11900K CPU benchmarked (Jan,12 2021 )

Mark Cuban: crypto trading is exactly like the internet stock bubble (Jan,12 2021 )

Bitcoin plummets by the most since March (Jan,11 2021 )

$2.4 Billion Worth of BTC, ETH, XRP, and Other Coins Liquidated (Jan,11 2021 )

Space Sweepers - Official Teaser (Jan,10 2021 )

XRP Climbs 10% In Bullish Trade (Jan,10 2021 )

Inside Iceland's Massive Bitcoin Mine (Jan,10 2021 )

Telegram feature exposes your precise address to hackers (Jan,09 2021 )

Donald Trump has been permanently banned from Twitter (Jan,09 2021 )

Storming of The US Capitol In Washington DC (Jan,09 2021 )

WhatsApp privacy fiasco, recommends Skype instead (Jan,09 2021 )

Ripple, Chris Larsen and Coinbase Transfer Whopping 520 Million XRP (Jan,09 2021 )

Ripple CTO says banks can issue stablecoins on XRPL (Jan,09 2021 )

Hackers can clone Google Titan 2FA keys (Jan,08 2021 )

Apple allegedly working with Hyundai (Jan,08 2021 )

The Difference Between A Baby Boomer And A Millennial (Jan,08 2021 )

Bitcoin's Market Value Now Exceeds That of Facebook (Jan,08 2021 )

Get Crying Suns for Free (Jan,08 2021 )

Bitcoin hits $40,000 but will the bull run continue? (Jan,08 2021 )

US Dollar Crashes To USD 40,000 per Bitcoin (Jan,08 2021 )

NVIDIA Releases GeForce 461.09 WHQL Drivers (Jan,07 2021 )

XRP Rallies While Bitcoin Nears USD 38K & Total Market Cap Smashes (Jan,07 2021 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs