Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with multi-factor
Search options answers only
not deleted
user 971
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but could also be something you are (a biometric).
65
votes
Accepted
Attacker circumventing 2FA. How to defend?
Not all two-factor authentication schemes are the same. Some forms of 2FA, such as sending you a text message, are not secure against this attack. Other forms of 2FA, such as FIDO U2F, are secure ag …
- 100k
46
votes
Accepted
How does HSBC's "Secure Key" actually work?
There are two standard ways to build such a device:
Time-based. The device has a secret key K (known only to the device and to your bank). When you press the button, The device computes F(K, T) (w …
- 100k
7
votes
Accepted
Safe way to authenticate (multi-factor authentication?) while being monitored?
Assumptions. As I understand it, you are only concerned about eavesdropping: e.g., that the folks who are monitoring you might record everything you do, and fail to adequately secure those records. Y …
- 100k
2
votes
Do any organizations use Smart Cards other than the military?
Many companies use various hardware devices (e.g., RSA SecurID) for authentication. I don't know how many other organizations use smartcards (like the CAC card) for security.
One limitation of smart …
- 100k
1
vote
Three-Factor Authentication for Windows
On Linux, PAM provides the ability to configure your authentication policy. You can configure PAM to require two factors -- or, if you want, to require three factors. You can read the PAM documentat …
- 100k
12
votes
Accepted
How safe is "trust this computer" option for websites?
Yes, the "remember me"/"trust this computer" option is safe to use, as long as you trust everyone else who might have access to your computer, and as long as it is implemented correctly.
It is genera …
- 100k
5
votes
Anybody have additional information on the EMC RSA SecurID compromise?
New information is now coming to light. It looks like the breach at RSA Security may have more severe implications for RSA's customers than RSA previously claimed. Apparently there has been a succes …
- 100k
7
votes
Anybody have additional information on the EMC RSA SecurID compromise?
News reports are suggesting that the RSA Security breach may have enabled the attackers to clone (duplicate) SecurID tokens used by Lockheed-Martin employees to gain access to the Lockheed-Martin netw …
- 100k
5
votes
Anybody have additional information on the EMC RSA SecurID compromise?
Here is the best tutorial/introduction to what went wrong that I've seen yet. It has a great deal of technical details about how SecurID worked, why they create a security risk, and the likely implic …
- 100k
3
votes
Anybody have additional information on the EMC RSA SecurID compromise?
Some more information about the RSA SecurID security breach has become available: in particular, how the attackers got malware onto RSA systems. A new Wired article by Kim Zetter says that the hacker …
- 100k
1
vote
POP3/IMAP Stronger Authentication
If your IMAP server supports using PAM for authentication, you might be able to configure PAM to use a Yubikey + a password for two-factor authentication. I believe the Yubikey does support integrati …
- 100k
1
vote
Steam and two-factor authentication
I think it is important to distinguish between three different questions one might ask:
Does this undermine the security of a particular user who uses 2FA? Answer: No. If you're using two-factor au …
- 100k
3
votes
SMS Authentication: random OTP or a cryptographic one
I recommend that you use a random value. That's the simplest approach. In security, simple is good.
You could use a TOTP, but why bother? (You mention they don't have to be stored in a database, b …
- 100k