Viewing posts by admin
the-keychain-issue
Posted by: admin 16 years, 3 months ago
I think awareness of the 'key chain' issue is increasing, which makes me happy. First, there was a post on ask.slashdot about carrying around multiple tokens and today, there was a post on the PingIdentity blog entitled Overcoming Keychain Issues with Strong Auth. He lists four possible solutions to the problem:1. Centralized Token Service - Local authentication for username/password and a centralized service for token validation.
good-business-and-good-security
Posted by: admin 16 years, 3 months ago
Larry J. Hughes, Jr over at Riskbloggers asks
After all, which of the following combinations are realistic?
- Bad Business, Bad Security
- Bad Business, Good Security
- Good Business, Bad Security
- Good Business, Good Security
the-express-scripts-bounty
Posted by: admin 16 years, 3 months ago
Now this could be interesting. Express Scripts is offering $1,000,000 reward for information leading to the arrest and conviction of the attacker trying to blackmail them. That is a lot of Ameros.
are-companies-under-reporting-breaches
Posted by: admin 16 years, 3 months ago
A while back, I read in Brian Krebs' blog that "colleges and universities were more than twice as likely to report a breach as any other entity, followed by government agencies (17 percent) and businesses (15 percent)." (Emphasis mine.). A well-worded sentence that got me to wondering if significant under-reporting occuring.
anonymous-two-factor-authentication-as-a-turing
Posted by: admin 16 years, 3 months ago
You can now add comments to the blog, but you must first prove to me that you are a human by logging in using WiKID Strong Authentication. Interestingly, this is still anonymous, because I am using the Token Client Test domain, which requires no identification to configure (it was set up as a simple way to test the WiKID token clients). So, it is an anonymous two-factor authentication CAPTCHA of sorts.
Recent Posts
- Blast-RADIUS attack
- The latest WiKID version includes an SBOM
- WiKID 6 is released!
- Log4j CVE-2021-44228
- Questions about 2FA for AD admins
Archive
2024
2022
- December (1)
2021
2019
2018
2017
2016
2015
2014
- December (2)
- November (3)
- October (3)
- September (5)
- August (4)
- July (5)
- June (5)
- May (2)
- April (2)
- March (2)
- February (3)
- January (1)
2013
2012
- December (1)
- November (1)
- October (5)
- September (1)
- August (1)
- June (2)
- May (2)
- April (1)
- March (2)
- February (3)
- January (1)
2011
2010
- December (2)
- November (3)
- October (3)
- September (4)
- August (1)
- July (1)
- June (3)
- May (3)
- April (1)
- March (1)
- February (6)
- January (3)
2009
- December (4)
- November (1)
- October (3)
- September (3)
- August (2)
- July (5)
- June (6)
- May (8)
- April (7)
- March (6)
- February (4)
- January (427)
2008
- December (1)
Categories
- PCI-DSS (2)
- Two-factor authentication (3)
Tags
- wireless-cellular-mobile-devices (7)
- Two-factor authentication (10)
- Wireless, cellular, mobile devices (6)
- NPS (1)
- Phishing and Fraud (111)
- Active Directory (1)
- pam-radius (3)
- privileged access (2)
- Cloud Security (10)
- Mutual Authentication (60)
- Web Application Authentication (1)
- Authentication Attacks (99)
- pci (50)
- Security and Economics (97)
- WiKID (133)
- pam (2)
- VPN (1)
- Installation (2)
- RADIUS Server (1)
- Open Source (64)
- Tutorial (2)
- Strong Authentication (35)
- Information Security (137)
- Transaction Authentication (13)
- Miscellaneous (100)
- Linux (2)
- transaction-authentication (6)
- Two Factor Authentication (254)