Replying to nobody

I saw people talking about putting their Bitcoin keys in yubikeys not even 2 weeks ago… nostr:note1704j6qaly6kxssg59trza396yzluaym5alkxv2kppk5px63grwuqx4a77f
Avatar
vnprc 1y ago

Casa recently added yubikey support.

https://blog.casa.io/secure-your-bitcoin-with-yubikey/

Casa supports firmware versions >= 5.5. This vulnerability exists for firmware versions < 5.7. Install Yubikey Manager to check your firmware version.

https://www.yubico.com/support/download/yubikey-manager/

Reply to this note

Please Login to reply.

Discussion

Avatar
Jameson Lopp 1y ago

We only started shipping Yubikeys with version 5.7 so it's probably low likelihood someone brought their own 5.5 device.

de
nobody 1y ago

Oh didn’t realize that was Casa. You guys rock so know you’re on top of it.

Avatar
Jameson Lopp 1y ago

Upon closer review it appears that the only Yubikeys with firmware version 5.5 were the Yubikey Bio, so I bet the total number of those in the wild are rather low.

de
nobody 1y ago

Do you mean Yubikeys that Casa distributed?

I just checked my 5Ci and it’s fw 5.4.3.