Dan Goodin on Nostr: Coming shortly. Researchers say they've uncovered an in-the-wild phishing operation ...
Coming shortly. Researchers say they've uncovered an in-the-wild phishing operation that "effectively bypasses any protections that a FIDO key grants." As I will explain, this isn't the case. The research misunderstands what's occurring in the attacks. More to follow.
Published at
2025-07-18 16:28:38 UTCEvent JSON
{
"id": "d12d9cc8258a83cc7cfcdb187d686cbe99ec840585a37f4d71f82e78e320e110",
"pubkey": "147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18",
"created_at": 1752856118,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@dangoodin/114875178596899085",
"web"
],
[
"proxy",
"https://infosec.exchange/users/dangoodin/statuses/114875178596899085",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/dangoodin/statuses/114875178596899085",
"pink.momostr"
],
[
"-"
]
],
"content": "Coming shortly. Researchers say they've uncovered an in-the-wild phishing operation that \"effectively bypasses any protections that a FIDO key grants.\" As I will explain, this isn't the case. The research misunderstands what's occurring in the attacks. More to follow.",
"sig": "5449a5a3e5f4f6ecc1b8cf7a19da4a425d9a3b0391869638ceac810790ddf1a715910df29c95ca68e397e10e7f3721b9c98f2c4d66387e0b100a35ac9d823041"
}