News for hackers. Stuff that matters.

A comment on The assault on neurosurgeons’ privileges by software and bureaucrats. Parent comment

Re:The assault on neurosurgeons’ privileges by software and ... by engi_nerd on Monday December 07, 2015 @10:20PM (#10694564)
Single sign on solutions don't work when some of the systems you sign on to are air-gapped and will never, ever, EVER be connected to any network. Other networks I access are completely separated from the greater internet. It would be useful, but single sign on would take my 25-30 passwords and shrink it to about 15.

Which would be useful but would still require me to keep track of them manually.

[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by ef4 on Monday December 07, 2015 @10:43PM (#10694642)
In those cases people should be using hardware authentication tokens. They're both more usable and more secure.
[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by engi_nerd on Monday December 07, 2015 @10:51PM (#10694673)
Try convincing the US government of that. I wish you luck (I really do). Trying to educate program security people on computers is one of the banes of my existence.
[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by ef4 on Monday December 07, 2015 @11:15PM (#10694763)
Plenty of parts of the US government do know. I've seen multiple DoD networks where hardware tokens are the required form of authentication.
[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by engi_nerd on Monday December 07, 2015 @11:22PM (#10694789)
So have I. CACs don't work on classified systems though.
[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by j_s on Monday December 07, 2015 @11:17PM (#10694769)
https://en.wikipedia.org/wiki/Common_Access_Card
[ Parent | on HN ]
Re:The assault on neurosurgeons’ privileges by software and ... by engi_nerd on Monday December 07, 2015 @11:21PM (#10694787)
These don't work on all networks. Like classified networks.
[ Parent | on HN ]