Potted?
Comment on YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel
cmnybo@discuss.tchncs.de 2 months ago
For the price they charge, they should be made so that opening the case will destroy the contents. They could have at least potted them.
TheButtonJustSpins@infosec.pub 2 months ago
cmnybo@discuss.tchncs.de 2 months ago
Encasing the circuit board in epoxy. It makes it very difficult to access components without destroying it. It’s also great for water proofing and increasing the mechanical robustness.
IllNess@infosec.pub 2 months ago
No negatives listed on the Wiki page. Are there any? Does potting increase the likely hood of overheating?
cmnybo@discuss.tchncs.de 2 months ago
There is potting compound with high thermal conductivity for things that produce a lot of heat. A YubiKey hardly uses any power, so heat should not be an issue.
The main downsides of potting are that it makes repair practically impossible and it can add a lot of weight if there is a large volume to be filled.
BCsven@lemmy.ca 2 months ago
Potting Grrrr. My fancy track lighting has been potted. It sucks because absolutely no place (even China) sells the 48v LED driver with the odd body shape to bypass the internal mounting screws, and the potting means I can’t access the board to desolder a resostor or something
TheButtonJustSpins@infosec.pub 2 months ago
Thanks! That makes a lot of sense.
xylem@beehaw.org 2 months ago
Physical anti-tamper, while important for this type of device, wouldn’t have helped for this particular attack. It’s an electromagnetic side channel, so they don’t even have to be touching the the thing to collect data.