Housey
MAKING OUT with a BOY who has a YUBIKEY on his COLLAR while there’s a FLIPPER ZERO in NFC CLONING MODE on MY COLLAR ​​​​​​​​
Feb 5 at 7:53pmWeb
Show threadTayFeb 6
@house i dont think thats actually going to work, is it?
Show threadH3Feb 6
@tay
@house
would be kinda bad if the device whos whole point is "not leaking private keys" would leak private keys xD
Show threadPeta  foppaFeb 6
@tay @house @h3 that is gonna be not the only device that leaks
Show threadStadler BLÅHAJ Evowo Feb 16
@tay @house @h3 security is hard, don't make dangerous assumptions :3

in general yeah but if they, say, re-use ivs or some shit like that...
Show thread4 "actually its only pyromania if i do it again" censord Feb 16
@memdmp @tay @house @h3 you should never reuse ivs, that leads to transmission of diseases.
Also, a used needle is less sharp so it hurt more
Show threadStadler BLÅHAJ Evowo Feb 16

@tay @house @h3 @4censord

so it hurts moreowO

Show thread4 "actually its only pyromania if i do it again" censord Feb 16
@memdmp @tay @house @h3 which makes it also easiert to do mistakes, so you might have to try multiple times as well
Show threadStadler BLÅHAJ Evowo Feb 16
@tay @house @h3 @4censord ,,,,,,sounds fun,,,,,,
Show thread4 "actually its only pyromania if i do it again" censord Feb 16

@memdmp @tay @house @h3 it should visit at some point hmm

oh also, i've recently been asked "oh btw, can you take blood"?
someone wants to do some drawing 

Show threadGwen the Loitering Fox Feb 6
@house First reasonable argument for fop to not try to implant an NFC-based yubikey microchip
Show threadsodiboo Feb 6
@gwenthefops @house in theory something like that ought to wok based on a challenge/response model and not a shared secret. like a bank card, which cannot be easily cloned despite working via RFID and being a strong hardware authenticator
Show threadXenotime, Librarian of Æther Feb 6
@gwenthefops @house @sodiboo yeah you couldn’t clone in but you could probably redirect it

like have a laptop in the other room ur trying to do evil stuff with generate challenges and send them to the flipper when you’re making out and then it will pass the response back
Show threadsodiboo Feb 6
@xeno @house @gwenthefops yeah, you could redirect/proxy it. though, most "hardware authenticator" devices have a button to activate them: they won't perform arbitrary challenges to anyone who is near; they only do that upon request through their physical button.

so, this would only help you if you're super stealthy. but I'm not gonna pretend like I'd notice this happening if I was making out with any of y'all
Show threadNot a Spring OnionFeb 6

@house

"What if our Personal Area Networks (PANs) touched?"