Whoops, @Yubico just scored 31% on the Sony PS3 Epic Fail scale. Collect three signatures from a FIPS Yubikey and you can calculate the private key.https://www.yubico.com/support/security-advisories/ysa-2019-02/ …
-
This Tweet is unavailable.
-
And FYI, there were several cases of vulnerabilities caused by not implementing that leading to actual theft! I don't have a complete list, but I know about Mycelium and bci. Bci was major fuckup because of large amount and this information being readily available.
ISTR a fun one where all apps on Android started with the same random number generation state, thanks to Zygote forking and OpenSSL initializing on process creation only or something like that...
![MⒶrtin HⒶboⓋštiak [BEFORE! Jan/3➞₿🔑∎, LNP/BP]](https://pbs.twimg.com/profile_images/1155014533720748032/DCY6N45O_normal.jpg)
-
-
That one was actually even worse because the keys were affected in obvious way. One could steal bitcoins without even knowing anything about the topic!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.