Timeline for Are security questions considered as 2FA?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 4, 2021 at 11:13 | comment | added | mentallurg | @Infra: The statement of "MechMK1" regarding distinction is important, but is not quite good formulated. Important is that authentication factors must be independent on other authentication factors. For instance, if one uses a password to unlock password manager, then passwords kept in this password manager are still a reliable authentication factor, and fingerprint can be used as another auth. factor. But if one uses a fingerprint to unlock password manager, then fingerprint and passwords from such password manager cannot be used as two authentication factors. | |
| Mar 4, 2021 at 10:39 | comment | added | user163495 | @Infra You're not understanding my argument. My argument is that the distinctions between those three categories isn't clean cut, but rather fuzzy. | |
| Mar 3, 2021 at 19:11 | comment | added | mentallurg | @MechMK1: Then you can say the same about any other authentication factor :) Token or smart card or smartphone are not auth. factors if you give them to somebody else. Fingerprint is not an auth. factor if you allow everyone to have a copy of it. Etc. :) | |
| Mar 3, 2021 at 18:18 | comment | added | Infra | @MechMK1 Although password is written in paper, still it is type 1 authenticator. You still use password to login. You can't use paper for authentication. | |
| Mar 3, 2021 at 18:05 | comment | added | user163495 | @mentallurg Not if the password is just written down on a strip of paper | |
| Mar 3, 2021 at 17:54 | comment | added | mentallurg | @MechMK1: To open password manager one needs often a separate password. And this password needs to be known. Thus it still drills down to knowing something. | |
| Mar 3, 2021 at 10:24 | comment | added | A. Hersean | The distinction between categories of factors is a design guideline. The idea being that someone able to find one factor of a category is likely to be able to find another in the same category. However, this distinction is irrelevant to the question of the OP. | |
| Mar 3, 2021 at 10:23 | history | edited | Infra | CC BY-SA 4.0 |
added 16 characters in body
|
| Mar 3, 2021 at 10:16 | comment | added | user163495 | Yes, I still need to replicate it, but that is the point. I don't need to have your key. I can create an unlimited amount of keys based on my knowledge. | |
| Mar 3, 2021 at 10:11 | comment | added | Infra | As per your physical key explanation, although you know how to replicate exact key. You still need replicate key to open that door. You cannot use your knowledge to open door. Otherwise if i know door access system will be failed to secure open state when power is gone. I can bypass biometric based door access system by just disconnecting power and it also based on my knowledge.. | |
| Mar 3, 2021 at 10:04 | comment | added | Infra | I cannot agree with your point, because according to your explanation nothing can categorize. Because even biometric device authentication can be misuse. Simply face recognition can be cheated with high definition image. That mean if i have HD image of someone else, it becomes something you have category. I understand in different way. Password or anything based on your knowledge is "Something you know". Any authentication based on physical device you have is "Something you have". | |
| Mar 3, 2021 at 9:42 | comment | added | user163495 |
I heavily disagree with the idea that "something you know" and "something you have" are two distinct things. They're more like liquids and gasses. For example, the password Lemonade1 is clearly "something I know". The password K27%=Fj^d?xHQ7KgrBzhZtkn=qU8UB3Z, that I had to store in my password manager becomes "something I have". A physical key is "something I have", but if I know a key's depth and spacing, it suddenly becomes "something I know", because I can replicate it at will. What I am getting at is don't get too hung up on categorizations, as they're not as clear cut as it seems.
|
|
| Mar 3, 2021 at 9:10 | history | answered | Infra | CC BY-SA 4.0 |