There are a few important preconditions necessary for this attack to work, but interesting story from Wired on Google recalling some Titan 2FA security keys due to a "misconfiguration" could allow an attacker who gets w/in 30 feet of someone holding one of these keys to communicate with that key or with the device the key is paired to.
https://www.wired.com/story/google-titan-security-key-recall-ble/
BrianKrebs /
npub1vc…0axsh
2024-04-15 22:28:40
Author Public Key
npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axshPublished at
2024-04-15 22:28:40Event JSON
{
"id": "19acba5d9608d45b2f1719e3d1b513abbb1f5c20603ae7099c8cab55b820ba6b",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1713212920,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/112277121984563601",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/112277121984563601",
"pink.momostr"
]
],
"content": "There are a few important preconditions necessary for this attack to work, but interesting story from Wired on Google recalling some Titan 2FA security keys due to a \"misconfiguration\" could allow an attacker who gets w/in 30 feet of someone holding one of these keys to communicate with that key or with the device the key is paired to.\n\nhttps://www.wired.com/story/google-titan-security-key-recall-ble/",
"sig": "75fe83a8c7acefe72e06b7f3813be7accc6d86cc4e3a58970681af5b954dedc831e8c0fc592d2152d6be967c65bba3affd508ecba31a86f2eafd1baf7702550f"
}