Timeline for PCI-DSS - key-based shell access to internal servers?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 28, 2013 at 7:35 | vote | accept | malthe | ||
| Oct 25, 2013 at 17:11 | comment | added | paj28 | Another way to think about this: if you write down your password on a post-it note, is that then "something you have"? | |
| Oct 25, 2013 at 17:07 | comment | added | malthe | I guess it's like the modern way of knowing things, i.e. I know how to find out really quick (using the internet). | |
| Oct 25, 2013 at 12:57 | comment | added | paj28 | Either way, it is still one of the three factors mentioned, so the distinction is irrelevant for this question. These terms are not used 100% consistently. My thinking is that unless a key is securely contained within a physical object (like a smart card) that forbids extraction then it is something you know. Some people say that to be something you know, you must know it in your head alone, but I don't agree with that. | |
| Oct 25, 2013 at 12:44 | comment | added | malthe | But a key is something you have, not something you know. | |
| Oct 25, 2013 at 9:21 | history | answered | paj28 | CC BY-SA 3.0 |