Viewing posts by admin
Notes on Twitter's two-factor authentication
Posted by: admin 10 years, 8 months ago
Welcome to club.
We're glad to see Twitter moving away from SMS, which has numerous defects to an authentication system that uses public key cryptography. Since WiKID was founded over 10 years ago, we have believed that asymmetric encryption is the best way to do authentication in the connected world.
SMS, Trojans and Two-factor authentication
Posted by: admin 10 years, 10 months ago
I've often said that SMS is a weak basis for two-factor authentication. It is unencrypted and unreliable. It is too easy to take over someone's account. I was reminded of it today by this puff piece on American Banker - an ad for RSA's anti-trojan services. Obviously, RSA sells anti-trojan services and two-factor authentication. We sell two-factor authentication as well, but not SMS-based. (We use software tokens that use asymmetric (public/private) keys.)
HTML5 Token
Posted by: admin 10 years, 10 months ago
For the record, our open-source HTML5 token was released in 2010 and is available on our sourceforge site: http://sourceforge.net/projects/wikid-twofactor/files/HTML5_Token_Client/.
SSH key management a potential risk
Posted by: admin 10 years, 10 months ago
We've long said that while we love SSH, SSH key management is a weak point, especially if you need to meet compliance requirements such as PCI. Now Charles Kolodgy of IDC is saying the same thing:
Reporting via our API
Posted by: admin 10 years, 10 months ago
Reporting is a fact of life. And to be honest, good reporting is good for security. In this post, we will take a look at the reports you can generate via the wAuth API to help monitor and manage your two-factor authentication installation.
Recent Posts
- The latest WiKID version includes an SBOM
- WiKID 6 is released!
- Log4j CVE-2021-44228
- Questions about 2FA for AD admins
- WiKID Android tokens had their data deleted over the weekend by Google Chrome bug
Archive
2024
- January (1)
2022
- December (1)
2021
2019
2018
2017
2016
2015
2014
- December (2)
- November (3)
- October (3)
- September (5)
- August (4)
- July (5)
- June (5)
- May (2)
- April (2)
- March (2)
- February (3)
- January (1)
2013
2012
- December (1)
- November (1)
- October (5)
- September (1)
- August (1)
- June (2)
- May (2)
- April (1)
- March (2)
- February (3)
- January (1)
2011
2010
- December (2)
- November (3)
- October (3)
- September (4)
- August (1)
- July (1)
- June (3)
- May (3)
- April (1)
- March (1)
- February (6)
- January (3)
2009
- December (4)
- November (1)
- October (3)
- September (3)
- August (2)
- July (5)
- June (6)
- May (8)
- April (7)
- March (6)
- February (4)
- January (427)
2008
- December (1)
Categories
- PCI-DSS (2)
- Two-factor authentication (3)
Tags
- wireless-cellular-mobile-devices (7)
- Two-factor authentication (10)
- Wireless, cellular, mobile devices (6)
- NPS (1)
- Phishing and Fraud (111)
- Active Directory (1)
- pam-radius (3)
- privileged access (2)
- Cloud Security (10)
- Mutual Authentication (60)
- Web Application Authentication (1)
- Authentication Attacks (99)
- pci (50)
- Security and Economics (97)
- WiKID (133)
- pam (2)
- VPN (1)
- Installation (2)
- RADIUS Server (1)
- Open Source (64)
- Tutorial (2)
- Strong Authentication (35)
- Information Security (137)
- Transaction Authentication (13)
- Miscellaneous (100)
- Linux (2)
- transaction-authentication (6)
- Two Factor Authentication (254)