News for hackers. Stuff that matters.

A comment on Pressing YubiKeys. Parent comment

Re:Pressing YubiKeys by BeaglePlaza on Friday October 02, 2020 @04:53PM (#24666911)
Threat is that the mobile devices could be used to 1) photograph proprietary systems, 2) exfil data over mobile networks or potentially introduce 3) malware via usb ports.

I don't really get how bolting the devices is a solution for enabling 2FA, unless the access console is also at the same location. But it would prevent 1) and 3).

[ Parent | on HN ]
Re:Pressing YubiKeys by f0ff on Friday October 02, 2020 @07:30PM (#24668098)
As long as the table is bolted to the floor, you're replacing posession (of a phone) factor, with location (in SOC) factor. Keeps both client happy, and security architect sleeping soundly.

Nice solution.

[ Parent | on HN ]
Re:Pressing YubiKeys by Dylan16807 on Friday October 02, 2020 @11:45PM (#24669345)
You look at the code and then you walk back to your desk to enter it.
[ Parent | on HN ]