meta user
network profile
| bio | website | 2718.us |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 9 months |
| seen | Apr 22 at 15:43 | |
| stats | profile views | 11 |
|
Jan 19 |
awarded | Informed |
|
Dec 9 |
awarded | Analytical |
|
Aug 16 |
awarded | Scholar |
|
Aug 16 |
accepted | Safe way to authenticate (multi-factor authentication?) while being monitored? |
|
Aug 16 |
awarded | Nice Question |
|
Aug 15 |
comment |
Safe way to authenticate (multi-factor authentication?) while being monitored? I didn't know smart cards could be used for SSH keys (I know little or nothing about smart cards)—is there somewhere you could point me for a general explanation of how this works? (I'd assume that the private key can't just be read from the card, or it wouldn't be particularly secure, so there must be some kind of interaction where the work normally done in the ssh client with the private key is done on the smart card, but my few attempts at finding an explanation haven't yielded much.) |
|
Aug 15 |
comment |
Safe way to authenticate (multi-factor authentication?) while being monitored? MyOpenID/PhoneFactor was definitely one of the things I had in mind (that's been my primary OpenID provider and I've used PhoneFactor with it for a while now). |
|
Aug 15 |
comment |
Safe way to authenticate (multi-factor authentication?) while being monitored? @Jeff: I don't know any details of the platform. In practice, I'm not particularly worried about direct risks from the owners of the computer, but rather risks coming from not properly securing the collected data, so that a theft of that information would compromised my personal accounts. |
|
Aug 14 |
comment |
Safe way to authenticate (multi-factor authentication?) while being monitored? In practice, I'm not at all worried about what the owners of the computer will do, but rather am worried that the collected information will not be properly secured, so that a theft of that information would compromised my personal accounts. As such, I'm less worried about session hijacking, which (I think) would only work at the same time as I'm using the service. In terms of specific multi-factor authentication, I'm thinking something like one-time passwords via Yubikey or via Axsionics Internet Passport. |
|
Aug 14 |
comment |
Safe way to authenticate (multi-factor authentication?) while being monitored? @Jeff: That would only allow them access at the same time as me, but not after I'd logged out, right? |
|
Aug 14 |
awarded | Supporter |
|
Aug 14 |
awarded | Student |
|
Aug 14 |
asked | Safe way to authenticate (multi-factor authentication?) while being monitored? |
