Yes, it is written:

"The attack requires physical access to the secure element"

Reply to this note

Please Login to reply.

Discussion

Thanks, then I don’t see how this is newsworthy.

If you have physical access to the Yubikey, you can just tap it to get it to sign. No exfiltration necessary.

This allow the cloning of the key, with no trace