Tag Info

New answers tagged

0

To really consider the ramifications of this, you will need to consider the adoption and spread of such technology before determining how much it will increase or decrease vulnerability. Right now, what it does, is send an E-mail message to the registered E-mail address of the account, (or in many cases, the E-mail address is the account name... which is ...


1

One-factor authentication is no more or less secure than existing methods in itself because the password itself is not the main weakness; The flavor of the moment in security circles is man-in-the-middle. Adding two factor authentication, in use by Google products like Gmail, Outlook online, or RSA tokens was another layer of security, but here's an example ...


0

I commend their effort to make the internet a safer and easier place to navigate. The centralization risk is no different than with any other password manager in that if the password vault is compromised, it's all compromised. In this case, the physical device acting as the vault, and the handshake being mostly automated.


2

A bit of background as to what Yubikey is first: Yubikey is a variation on a common type of device known as a One Time Password generator. Basically a mini-computer that generates an essentially unlimited stream of passwords, usually one per minute from a deterministic algorithm embedded in the device. The trick is that next password is predictable if you ...


0

This works similarly to any symmetric key one-time password (OTP) technology. Point 1 - This is not meant to replace your password but instead be a second factor of authentication. Without possession of the Yubikey you are unable to generate the code necessary to authenticate to a system. Point 2 - Well, it generates one time passwords so it is more ...



Top 50 recent answers are included