178 reputation
6
bio website 2718.us
location
age
visits member for 2 years, 11 months
seen Apr 27 at 17:37

Jan
19
awarded  Informed
Dec
9
awarded  Analytical
Aug
16
awarded  Scholar
Aug
16
accepted Safe way to authenticate (multi-factor authentication?) while being monitored?
Aug
16
awarded  Nice Question
Aug
15
comment Safe way to authenticate (multi-factor authentication?) while being monitored?
I didn't know smart cards could be used for SSH keys (I know little or nothing about smart cards)—is there somewhere you could point me for a general explanation of how this works? (I'd assume that the private key can't just be read from the card, or it wouldn't be particularly secure, so there must be some kind of interaction where the work normally done in the ssh client with the private key is done on the smart card, but my few attempts at finding an explanation haven't yielded much.)
Aug
15
comment Safe way to authenticate (multi-factor authentication?) while being monitored?
MyOpenID/PhoneFactor was definitely one of the things I had in mind (that's been my primary OpenID provider and I've used PhoneFactor with it for a while now).
Aug
15
comment Safe way to authenticate (multi-factor authentication?) while being monitored?
@Jeff: I don't know any details of the platform. In practice, I'm not particularly worried about direct risks from the owners of the computer, but rather risks coming from not properly securing the collected data, so that a theft of that information would compromised my personal accounts.
Aug
14
comment Safe way to authenticate (multi-factor authentication?) while being monitored?
In practice, I'm not at all worried about what the owners of the computer will do, but rather am worried that the collected information will not be properly secured, so that a theft of that information would compromised my personal accounts. As such, I'm less worried about session hijacking, which (I think) would only work at the same time as I'm using the service. In terms of specific multi-factor authentication, I'm thinking something like one-time passwords via Yubikey or via Axsionics Internet Passport.
Aug
14
comment Safe way to authenticate (multi-factor authentication?) while being monitored?
@Jeff: That would only allow them access at the same time as me, but not after I'd logged out, right?
Aug
14
awarded  Supporter
Aug
14
awarded  Student
Aug
14
asked Safe way to authenticate (multi-factor authentication?) while being monitored?