Yubico Forum

Hi, Yubico management (and of course other readers),

last night I was a live witness of the appearance of the post of 'edjenecai'. For those who missed it: in it 'edjenecai' claims to be a former Yubico employee who has been severely mistreated by Yubico. Now, I have never met this person, and he might just as well be a troll. For what it is worth: even if his claims are (partially) correct, surely the Yubicom forums (and other forums on the Internet) are hardly the place to settle this.

Understandably, his postings were removed. Alas, this story starts to get a life of its own: whoever this person is, he has left his messages in many other (yubikey related) places. The Dutch forum 'security.nl', which many security specialists read, picked up this story too.

Guys, I feel a short statement would be in order so we can put this to rest.

As some of you have noted and as others have privately emailed, a recent post was made in the Forum, and sent to other lists, by someone who claims to have been employed at Yubico. The writer identified him/herself as "edjenecai" but the origin of post is otherwise unknown.

Yubico treats its employees and consultants in a professional manner. We have paid those who have assisted us in building Yubico and the YubiKey infrastructure and service in full, in accord with all contractual commitments and laws. We have no liabilities to any former employees or consultants.

We do not comment on personal or employment issues in public.

The author of the post makes claims about Yubico's security architecture and implementation. Since March 2009, Yubico's critical servers have been located in a high security environment in Sweden, used by leading financial institutions. Nonetheless, Yubico regards the security of our customers as our highest priority and we are reviewing our processes and procedures for possible security issues.


With the best regards,

JakobE
Hardware- and firmware guy @ Yubico