/?pid=hackers-can-clone-google-titan-2fa-keys-22193

Updated:02:10 PM EDT Jul 24


this is ggmania.com subsite Hackers can clone Google Titan 2FA keys - TechAmok

Hackers can clone Google Titan 2FA keys - [security]
05:04 PM EST - Jan,08 2021 - post a comment

Two-factor authentication, or 2FA, is a method that makes account takeovers much harder to pull off. Instead of using only a password to prove someone is authorized to access an account, 2FA requires a second factor, such as a one-time password, possession of a physical object, or a fingerprint or other biometric. Physical keys are among the - if not the - most secure forms of 2FA because they store the long-term secret that makes them work internally, and only output non-reusable values. The secret is also impossible to phish. Physical keys are also more convenient, since they work on all major operating systems and hardware. The Titan vulnerability is one of the only weaknesses ever to be found in a mainstream 2FA key. However improbable, a successful real-world exploit would completely undermine the security assurances the thumb-size devices provide. The NinjaLab researchers are quick to point out that despite the weakness, it's still safer to use a Titan Security Key or another affected authentication device to sign in to accounts than not to.

The cloning works by using a hot air gun and a scalpel to remove the plastic key casing and expose the NXP A700X chip, which acts as a secure element that stores the cryptographic secrets. Next, an attacker connects the chip to hardware and software that take measurements as the key is being used to authenticate on an existing account. Once the measurement-taking is finished, the attacker seals the chip in a new casing and returns it to the victim. Extracting and later resealing the chip takes about four hours. It takes another six hours to take measurements for each account the attacker wants to hack. In other words, the process would take 10 hours to clone the key for a single account, 16 hours to clone a key for two accounts, and 22 hours for three accounts.

Short overview of recent news articles

Battlefield 6 reveal trailer (Jul,24 2025 )

Samsung Galaxy Z Fold 7 - Two Week Review (Jul,22 2025 )

Killer 4K 240Hz QD-OLED for just £750: MSI MPG 272URX (Jul,21 2025 )

LAMBORGHINI URUS *STAGE 1* // REVIEW on AUTOBAHN (Jul,20 2025 )

THE BEST VW GOLF GTI I've Driven! Proper ClubSport (Jul,20 2025 )

Intel Core Ultra 9 275HX vs AMD Ryzen 9 9955HX - Which CPU is Best? (Jul,19 2025 )

LAMBORGHINI REVUELTO V12 // 370KMH REVIEW on UNLIMITED AUTOBAHN! (Jul,18 2025 )

Mortal Kombat II - Official Trailer (Jul,18 2025 )

Stranger Things 5 - Official Teaser (Jul,17 2025 )

Google Is Selling Fake Products - WAN Show July 11, 2025 (Jul,14 2025 )

Hacked by playing Call of Duty WW2 on Gamepass? (Jul,12 2025 )

2025 VW Golf GTE // TOP SPEED REVIEW on AUTOBAHN (Jul,12 2025 )

NEW Audi RS3 v cheapest used RS3: DRAG RACE (Jul,11 2025 )

A critical security vulnerability in Microsoft Remote Desktop Client (Jul,10 2025 )

Samsung Z Fold/Flip 7 Impressions: Major Upgrades! (Jul,10 2025 )

Gmail's latest feature helps you get rid of those pesky emails from (Jul,08 2025 )

I'm an idiot and still made top 5... here's how (Jul,06 2025 )

The Fantastic Four: First Steps - Official 'Lift Off' Teaser (Jul,05 2025 )

Samsung Galaxy Z Fold 7 - Hands on Look (Jul,04 2025 )

RTX 5070 Ti vs RTX 5080 - Is 5080 Gaming Laptop Worth More $$$? (Jul,04 2025 )

FIRST DRIVE: Praga Bohema - Crazy Hypercar Driven! (Jul,04 2025 )

Ballerina - Exclusive John Wick Deleted Scene (2025) Keanu Reeves, (Jul,03 2025 )

Call of Duty: WWII - Remote Code Execution Warning (PC Game Pass) (Jul,03 2025 )

1014HP Lamborghini REVUELTO 369KMH TOP SPEED POV on AUTOBAHN (Jul,02 2025 )

Nvidia Drivers (V 576.80 vs V 576.88) - Test In 12 Games - RTX 4060 (Jul,01 2025 )

AMD Adrenalin 25.6.3 Driver Is Available (Jun,30 2025 )

NVIDIA GeForce RTX 5080 SUPER Could Feature 24 GB Memory, Increased (Jun,30 2025 )

Guess What Nvidia Did THIS Time (Jun,29 2025 )

The 10 Best Dinosaur Movies of All Time (Jun,28 2025 )

Microsoft officially confirms that Windows 11 version 25H2 is coming (Jun,28 2025 )

Eddington - Official Trailer 2 (2025) Joaquin Phoenix, Pedro Pascal (Jun,26 2025 )

Microsoft Say System Restore Points Now Expire After 60 Days (Jun,25 2025 )

Facebook, Netflix, and Microsoft Websites Hijacked to Insert Fake (Jun,25 2025 )

I put a $3000 GPU in my Average PC... It Was a Mistake (Jun,24 2025 )

Best External SSD for Mac 2025: After Weeks of Testing, Here's What (Jun,24 2025 )

Mostly boob jokes this week (RTX 5090 DD) - Tech News June 22 (Jun,23 2025 )

Superman - Official 30 Second Spot (2025) (Jun,21 2025 )

'The fastest road car I've ever been in!' - Ferrari F80 track day (Jun,21 2025 )

CPU SCAM: AMD Ryzen 9800X3D Counterfeits & Fraud (Jun,20 2025 )

28 Years Later Review (Jun,19 2025 )

HW News - NVIDIA "N1x" CPU Leak, ASUS Xbox ROG Ally, More Intel (Jun,18 2025 )

NVIDIA GeForce 576.80 WHQL Driver (Jun,17 2025 )

The Fantastic Four: First Steps - Official 'H.E.R.B.I.E.' Teaser (Jun,16 2025 )

Huawei Maextro S800 First Look - A True BMW & Mercedes Killer? (Jun,15 2025 )

Upgrade Windows 10 to Windows 10 LTSC Without Losing Data (Jun,14 2025 )

Squid Game: Season 3 - Final Games Trailer (Jun,14 2025 )

WWDC 2025: Everything Revealed in 9 Minutes (Jun,11 2025 )

Microsoft June 2025 Patch Tuesday fixes exploited zero-day, 66 flaws (Jun,10 2025 )

This Malware BREAKS WINDOWS! (Jun,10 2025 )

Reset Forgotten Password without Any Software, without USB drive in (Jun,10 2025 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs