01:54:25 <pabs> Yubikey security updates: https://www.yubico.com/support/security-advisories/ysa-2024-03/
01:54:25 <pabs> it also applies to e-Passports, SIM cards and more: https://news.ycombinator.com/item?id=41438346
01:58:39 <nicolas17> "updates"?
02:03:44 <nulldata> steering - probably not what you're thinking of but WordPress has a 100-year plan. https://wordpress.com/100-year/
02:06:10 <pabs> well, I guess no updates (like is usual for proprietary firmware), but security issues
02:06:46 <nicolas17> the hardware doesn't allow for firmware updates by design
02:07:05 <pabs> yay!
02:07:21 * pabs looks at his keyboard and wonders when it last got an update
02:07:51 <nicolas17> also, people on hackernews had some pretty convincing arguments that: if you manage to steal a yubikey, instead of doing this complicated side-channel attack, it's far easier to replace it with a non-functional yubikey
02:08:16 <nicolas17> the owner will go "huh my yubikey stopped working" while you use the stolen one to login to all their accounts
02:08:38 <nicolas17> instead of stealing it, side-channel-ing the keys out of it, and putting it back
02:09:06 <pabs> right
02:12:02 <nicolas17> oh, for something completely different
02:12:04 <nicolas17> pabs: https://www.youtube.com/watch?v=mI0teN4hPYQ
02:12:13 <nicolas17> Apple Watch comms reverse-engineered
02:12:35 <pabs> nice
02:13:15 <nicolas17> they have some questionable crypto, as usual
02:13:29 <nicolas17> which doesn't matter because it's inside an IPSEC tunnel with proper crypto
02:53:14 <hook54321> might be able to do something similar to what's done with nail polish in this to protect against that https://mullvad.net/en/help/how-tamper-protect-laptop
02:54:28 <hook54321> if a yubikey ever stops working someone could compare the pictures of the nail polish to confirm it's the same yubikey
04:30:00 <steering> nulldata: oooh, I might actually trust wordpress to fulfill that
04:34:49 <steering> I'm glad my gpg keys are all still RSA :'D
09:37:09 <pabs> huh, X let me read https://x.com/detahq without logging in (JS-enabled, Firefox)
09:37:09 <eggdrop> nitter: https://nitter.lucabased.xyz/detahq
12:32:09 <DigitalDragons> were the tweets all really old? that's the behavior i've observed with profiles when logged out
14:43:26 <nicolas17> old and in seemingly random order?
17:00:14 <JAA> Ordered by number of likes?
17:09:24 <DigitalDragons> it seemed like some kind of rougher "popularity" metric to me but I might be misremembering
18:12:55 <OrIdow6> That's what I recall being the case a few months ago, maybe they've changed it since