News for hackers. Stuff that matters.

A comment on IPv6-ghost-ship: Using TOTP as part of an AWS EC2 IPv6 address. Parent comment

Re:IPv6-ghost-ship: Using TOTP as part of an AWS EC2 IPv6 ad... by DarylZero on Thursday January 06, 2022 @12:08AM (#29819676)
Putting the IP block over WireGuard fixes both issues.
[ Parent | on HN ]
Re:IPv6-ghost-ship: Using TOTP as part of an AWS EC2 IPv6 ad... by kadoban on Thursday January 06, 2022 @12:50AM (#29819945)
If you're using wireguard don't you already have a secured connection and don't even need any of this?
[ Parent | on HN ]
Re:IPv6-ghost-ship: Using TOTP as part of an AWS EC2 IPv6 ad... by DarylZero on Thursday January 06, 2022 @09:26AM (#29823863)
If the computer is stolen or compromised, but the TOTP device remains secure, then access will be blocked.

Actually, occurs to me now, the brute force approach could still be used then, so that does have to be mitigated separately (which is possible).

[ Parent | on HN ]