Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with multi-factor
Search options answers only
not deleted
user 37315
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but could also be something you are (a biometric).
0
votes
Are repeated multi-factor authentication codes a problem
The main question is if the MFA code is predictable enough or not.
Just because "the same code" (so likely not a specific code known to the attacker) will repeat within a "certain time" (no idea how …
- 208k
3
votes
Accepted
Malware able to "read" one's screen
malware that is able to "read" someone's screen or take screenshots of it, making even the usage of multifactor authentication vulnerable.
There is a wide variety of legal and illegal remote acce …
- 208k
5
votes
Is it possible to bypass two step authentication process?
You don't say what kind of 2FA process you are using and which kind of phone you have. But if the hacker manages to install a privileged application to your phone he might be able to capture 2FA token …
- 208k
1
vote
How can 2FA be bypassed if I set a number which is unknown to everybody?
As long as you use a different secret phone number for each site the risk is probably low since only you and the site know the phone number. But both might leak it anyway: the past has shown that even …
- 208k
2
votes
Could IMAP authentication be adapted to support 2FA?
Could IMAP authentication be adapted to support 2FA?
IMAP can support multiple authentication methods, i.e. the protocol is extensible.
... why hasn't it been done
It has been done. Modern …
- 208k
1
vote
Accepted
How much entropy is required for a Grid Card?
I assumed the total entropy of one query to be about 232, which is only 529
The computation is correct but what you show is the number of variants which is not the same as entropy or password str …
- 208k
4
votes
Accepted
is it ok to reveal number of digits in a muti-factor code input screen?
Providing the number of digits is clearly good for usability.
Knowledge of the number of digits for an attacker limits the search space when trying to hack the security code, so it clearly limits secu …
- 208k
2
votes
Accepted
Why is individual user security important to a company?
TL;DR: The digital identities of a user are the keys to increasingly valuable kingdoms in the digital world. This makes theft or misuse of such identities lucrative attacks. The need for increasing p …
- 208k
6
votes
Accepted
What's the idea of two factor authentication, if some mobile/desktop apps just require password
2FA means to have to two factors for authentication, preferable one is a physical factor ("know" and "have"). The idea is that this way it is not enough to get the password due to hacking, data leakag …
- 208k
36
votes
In a "card not present" transaction, is the credit card number, expiry date & CVV considered...
A requirement for "what you have" based authentication is that ownership can be clearly assigned to a single specific entity. This specifically means that this information/device can not be (easily) c …
- 208k
49
votes
Accepted
Should the average user with no special access rights be worried about SMS-based 2FA being t...
There is no real concept of an "average user with no special access rights". From the perspective of an attacker the main point is if the effort needed for an attack is less then the gain of the attac …
- 208k
53
votes
Accepted
When does 'something you have' NOT become 'something you know'?
When I have a public/private RSA-keypair with 4096 bit and I remember the private key without storing it anywhere, is it something I know?
Yes.
When I write down or store the private part of a publ …
- 208k
4
votes
Which factor of authentication is an X.509 certificate
Within certificate based authentication the user has not only the certificate but also the secret key to this certificate, which matches the public key inside the certificate. Only the user itself sho …
- 208k
25
votes
Accepted
Why don't PGP and SSH keys see more widespread use as a second factor when authenticating?
Let's check out what PGP and SSH actually offer for this purpose:
PGP:
Client must install PGP software which is not installed by default in the majority of the systems. Client must create a PGP key …
- 208k
1
vote
Can a hacker compromise the system if he can steal one of the factors of the 2FA?
I read an article saying that smartcards used as a 2FA is still susceptible to attacks such as MITM attack?
I interpret the relevant parts of this article as follows:
A hacker could mirror the …
- 208k