The WiKID Blog, musings on two-factor authentication, information security and some other stuff.
Apple's treatment of 32-bit libraries requires a new WiKID token for iOS 11
Posted by: root 5 years, 3 months ago
Apple announced that it will no longer support 32-bit libraries or apps. We developed our iPhone WiKID token before there even was a 64-bit encryption library available.
Deloitte and the need for 2FA on Admin accounts
Posted by: root 5 years, 5 months ago
Deloitte Touche Tohmatsu Limited has 263,000 employees. That's an astounding number of people, computers, networks, access points etc, etc. Very hard to keep attackers out of such a vast network with so many needs and uses. It would cost a lot of money to provide 2FA for all those users. It would take a lot of effort to monitor the SIEM events for all those users.
Evading Microsoft ATA > Another reason to use 2FA for Windows Admins
Posted by: root 5 years, 7 months ago
Nikhil "SamratAshok" Mittal has a great series of posts on how to avoid detection by Microsoft's Advanced Threat Analytics (ATA).
Defeating pass-the-hash attacks with two-factor authentication
Posted by: root in Two-factor authentication 5 years, 9 months ago
Implementing two-factor authentication for remote access is a great way to keep attackers out of your network. Users' credentials are floating all around the internet. But attackers can still get in your network through malware and other tools. In the past, we described how two-factor authentication can be used at each stage of an attack to make detection easier and execution much harder:
Two-factor authentication for banking
Posted by: root 5 years, 10 months ago
Clearly, you should not use SMS for banking authentiation. We have been saying this for over eight years now. The solution must use encryption that you control.
Recent Posts
- WiKID 6 is released!
- Log4j CVE-2021-44228
- Questions about 2FA for AD admins
- WiKID Android tokens had their data deleted over the weekend by Google Chrome bug
- Scalability improvements in version 5.0 of the WiKID Strong Authentication server
Archive
2022
- December (1)
2021
2019
2018
2017
2016
2015
2014
- December (2)
- November (3)
- October (3)
- September (5)
- August (4)
- July (5)
- June (5)
- May (2)
- April (2)
- March (2)
- February (3)
- January (1)
2013
2012
- December (1)
- November (1)
- October (5)
- September (1)
- August (1)
- June (2)
- May (2)
- April (1)
- March (2)
- February (3)
- January (1)
2011
2010
- December (2)
- November (3)
- October (3)
- September (4)
- August (1)
- July (1)
- June (3)
- May (3)
- April (1)
- March (1)
- February (6)
- January (3)
2009
- December (4)
- November (1)
- October (3)
- September (3)
- August (2)
- July (5)
- June (6)
- May (8)
- April (7)
- March (6)
- February (4)
- January (427)
2008
- December (1)
Categories
- PCI-DSS (2)
- Two-factor authentication (3)
Tags
- wireless-cellular-mobile-devices (7)
- Two-factor authentication (10)
- Wireless, cellular, mobile devices (6)
- NPS (1)
- Phishing and Fraud (111)
- Active Directory (1)
- pam-radius (3)
- privileged access (2)
- Cloud Security (10)
- Mutual Authentication (60)
- Web Application Authentication (1)
- Authentication Attacks (99)
- pci (50)
- Security and Economics (97)
- WiKID (133)
- pam (2)
- VPN (1)
- Installation (2)
- RADIUS Server (1)
- Open Source (64)
- Tutorial (2)
- Strong Authentication (35)
- Information Security (137)
- Transaction Authentication (13)
- Miscellaneous (100)
- Linux (2)
- transaction-authentication (6)
- Two Factor Authentication (254)