Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
by xaduha on Thursday November 15, 2018 @08:13AM
(#18458967)
You mean YubiKey? I know, but it's hard for me to view YubiKey as anything other than a proprietary solution. It's great they built a business out of it, but at the same time I want open-source options to exist.
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
by zyberzero on Thursday November 15, 2018 @11:21AM
(#18460504)
Enter Solokeys [0]. They support U2F out of the box, and they say OpenPGP (can be used for SSH) is in the works.
I've yet to receive mine, so I don't know if they work or not..
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
by notamerican on Thursday November 15, 2018 @07:52AM
(#18458837)
> There is a similar thing in SIM-cards
Got any good resources on this subject? I'd be interested to know more :)
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
by xaduha on Thursday November 15, 2018 @08:28AM
(#18459040)
I'm not entirely sure what he means by that, but SIM-cards are smartcards.
https://en.wikipedia.org/wiki/Subscriber_identity_module#/me...
And you can buy smartcards in this formfactor e.g. https://www.cardomatic.de/epages/64510967.sf/en_GB/?ObjectPa...
Re:Beyond Passwords: 2FA, U2F and Google Advanced Protection
by rocqua on Thursday November 15, 2018 @11:52AM
(#18460849)
Look into EAP-SIM and EAP-AKA for some concrete examples.
I believe mobile payment also uses the SIM card, but I'm not sure.
For a more general overview see https://en.wikipedia.org/wiki/Universal_integrated_circuit_c....
There is apparently a toolkit to design applications to run on the SIM https://en.wikipedia.org/wiki/USIM_Application_Toolkit
I don't know of any other implementations. An SSH auth module using SIM would be pretty cool.
There is a similar thing in SIM-cards, but that is under-utilized as well.