News for hackers. Stuff that matters.
Re:Show HN: Fail2web, a fail2ban GUI by ryan-c on Thursday June 26, 2014 @08:27PM (#7952220)
Add http://www.heiho.net/pam_shield/ and http://www.snafu.priv.at/mystuff/pam_recent.c to that list.

I use use some iptables voodoo with them to auto-whitelist on successful auth and blacklist on failed auth attempts.

Three things to note about google authenticator:

1. ssh keys bypass it unless you have a patched version of OpenSSH with multiauth

2. It can be configured to have you append your one time code to your password for interop with things that can't handle keyboard-interactive auth

3. It is self contained and doesn't use any google services to function.

Re:Show HN: Fail2web, a fail2ban GUI by akerl_ on Thursday June 26, 2014 @09:37PM (#7952407)
With regard to #1, newer OpenSSH supports AuthenticationMethods, which lets you chain keys and PAM.
Re:Show HN: Fail2web, a fail2ban GUI by ryan-c on Wednesday July 02, 2014 @10:32PM (#7981160)
Ah, thanks. For a while you had to apply a patch to get that, I wasn't aware it'd be merged.