320 reputation
1210
bio website
location
age
visits member for 3 years, 7 months
seen Jul 31 at 11:49

Apr
13
awarded  Nice Question
Nov
7
awarded  Famous Question
Oct
31
awarded  Popular Question
May
3
awarded  Popular Question
Aug
6
awarded  Notable Question
May
2
awarded  Nice Question
Mar
30
awarded  Yearling
Feb
9
awarded  Popular Question
May
16
comment How does LastPass' grid multi-factor authentication work behind the scenes?
Thanks for than link @john. According to the lastpass user manual (helpdesk.lastpass.com/security-options/…) there is an option to allow offline access. Your link seems to suggest is that if you allow this then it is basically possible to circumvent the 2nd factor in an offline context. The only way the 2nd factor works is if you disallow offline access.
May
16
comment How does the Windows “Secure Desktop” mode work?
@Iszi thanks for pointing that out. What are hardware keyloggers? Would that be like a specially engineered keyboard in an internet cafe? I'm mostly concerned about my Windows PC so I'm willing to trust that the hardware is fine but I am concerned about Malware installing itself.
May
16
comment How does LastPass' grid multi-factor authentication work behind the scenes?
I guess what I was trying to understand and what got me confused is how this works in an offline context. I understand the Challenge-Response model when you are online but Lastpass claims that you can still access you vault when you are offline (I haven't tested this). Any guesses for how the grid authentication works when you are offline?
May
16
accepted How does LastPass' grid multi-factor authentication work behind the scenes?
May
14
awarded  Teacher
May
12
awarded  Scholar
May
12
accepted How does the Windows “Secure Desktop” mode work?
May
12
comment How does the Windows “Secure Desktop” mode work?
Wow, I learned more about the Windows GUI than I had bargained for. Great answer! Thank you very much!
May
12
comment How does LastPass' grid multi-factor authentication work behind the scenes?
You're right, I meant to say that the shared secret is the grid, not the key. Apologies for the typo as well as the unclear explanation but I was writing in a hurry. I actually don't know how the Lastpass OTPs work, I was hypothesizing about how I thought it could work.
May
12
asked How does the Windows “Secure Desktop” mode work?
May
12
comment How does LastPass' grid multi-factor authentication work behind the scenes?
Thanks. I guess what I was getting confused about was comparing this to the one-time-passwords (OTPs). My understanding of the OTPs is that they take the encryption key and encrypt it with the OTP but will only serve this out once. Lastpass still only sees an encrypted version of the key so they can't learn my secrets. In the multifactor grid case it appears that there is a shared secret (the key) which is known to Lastpass which initially concerned me. However since this is only used as a second factor I guess it is fine.
May
12
awarded  Editor