nowen
NIST deprecates SMS as an OOB auth What should you do?
Re:Mark Zuckerberg's Twitter and Pinterest password was 'dadada'
on Monday June 06, 2016 @12:32PM (#11848025)
Google authenticator is only one-factor, possession of the shared secret in the phone. That's why it requires 'two-steps'.
Why the internet is about to get much more secure
WiKID 2FA for Linux and Windows Administrators, Locally
Use 2FA for windows-native privilege accounts instead of password spreadsheets
Yet another reason to add two-factor authentication to your admin accounts
Why you need a stand-alone 2FA server
Avoiding the creepy factor in authentication
2FA for defense in depth at attack stages
Bridging Gunnar Gaps to create virtual circles
The 2 technologies that work in infosec and how to deploy them
FISMA report states two-factor auth could have stopped 52% of incidents
Privacy concerns about SMS-based two-factor authentication
Seven common misconceptions about enterprise two-factor authentication
Two-factor auth from the get-go: Eliminating Password1
Free Enterprise two-factor authentication from WiKID for up to 5 users
Use Packer to build a pre-configured Openvpn server ready for 2FA
Are we royally screwing up two-factor authentication?
Top 18 Open Source Apps For Securing Your Network From Attacks
http://efytimes.com/e1/fullnews.asp?edid=133428
Good list here.
The big list of two-factor tutorials for sys admins
http://www.wikidsystems.com/WiKIDBlog/support/support/big-list-of-two-factor-tutorials
We've done a lot of tutorials on how to add two-factor authentication to various enterprise remote access solution. Here's the list.
On the risks of poorly managed SSH keys
Busting the Biometric Myth - once and for all
http://www.wikidsystems.com/WiKIDBlog/busting-the-biometric-myth-once-and-for-all
Biometrics continue to gather VC money and customers. They promise to be the end-all of two-factor authentication. But are they more like snake-oil.
Defending SMS auth and why your bank has poor security
Re:Free eGuide: Adding two-factor authentication to your network
on Tuesday December 11, 2012 @09:12AM (#4904557)
So, we get a lot of questions about how to implement 2 factor authentication. You can do it quick and simple, but it is more secure to run it through your directory (AD). This eguide shows you how to do it end-to-end using standard protocols, so it works with any 2 factor solution, not just ours. Enjoy.
Free eGuide: Adding two-factor authentication to your network
http://www.wikidsystems.com/learn-more/two-factor-authentication-white-papers
No reg req'd. Includes examples for Cisco, Juniper, Linux, AD via NPS etc.
How to not add two-factor authentication to your product
I know something that is not two-factor authentication
Re:I know someone whose 2-factor phone authentication was hacked...
on Tuesday June 12, 2012 @11:41AM (#4100979)
I hate to use the cliché, but: weakest link. SMS and dial-back systems rely on the security of the telco, who are dis-incented to secure their users' accounts. These systems do not use encryption! Of course they are going to get owned.
More on the Security of Software Tokens
http://www.wikidsystems.com/WiKIDBlog/more-on-the-security-of-software-tokens
The recent analysis on how to clone an RSA software tokens begs the question: What are the real risks?