YubiKeys have an unfixable security flaw — but it’s difficult to exploit

A critical security flaw in Yubikeys allows attackers to extract cryptographic keys via power consumption analysis and cloning. This unfixable vulnerability requires hardware replacements, however, it is not much of a threat as the attacker needs physical possession of the YubiKey.