News for hackers. Stuff that matters.

A comment on OTPW – A one-time password login package.

Re:OTPW – A one-time password login package by bobds on Monday September 13, 2010 @09:45AM (#1686508)
This would be a great feature in a lot of web-based apps. Generate a few hundred passwords when you are on a secure connection, use them when needed.

Edit: I found a few implementations.

http://wordpress.org/extend/plugins/one-time-password/

http://alexking.org/blog/2008/06/27/phonefactor-10

http://henrik.schack.dk/yubikey-plugin/

http://blog.fastmail.fm/2008/07/21/one-time-and-sms-password...

http://squirrelmail.org/plugin_view.php?id=276

Yubikey looks interesting and they also have a web service API.

http://www.yubico.com/products/yubikey/ http://www.yubico.com/developers/api/

MyPW is another web service: https://www.mypw.com/

OpenOTP supports both hardware tokens (also supports Yubikeys) and all kinds of phones.

http://www.rcdevs.com/products/openotp/

[ Parent | on HN ]
Re:OTPW – A one-time password login package by gnosis on Monday September 13, 2010 @12:23PM (#1687056)
Before you trust Yubikey, you might want to read about its weaknesses:

http://security.dj/?p=4

[ Parent | on HN ]