The WiKID Blog

Viewing posts tagged Two Factor Authentication

better-password-strength-just-one-factor

Posted by: admin 15 years, 3 months ago

Pete over at Spire Security points out the obvvious(which alluded me):

As far as I can tell, Bruce Schneier's current Wired column, MySpace Passwords Aren't So Dumb, is intended to be taken seriously. The article is supposed to be about how "good" passwords on MySpace are these days, and there isn't a hint of irony in his statement:

"But seriously, passwords are getting better."

I am at a loss to explain how he can come to this conclusion when every single one of the 34,000 passwords he analyzed were stolen through a phishing attack. What he should have said was: "This shows that a 1-character password (the shortest they harvested) is just as secure as a 32-character password (the longest they harvested)"

He also points out that if you're not going to do two-factor authentication, then don't worry about long passwords. If any data is important enough or vulnerable enough to require a strong and therefore annoying password policy, use two-factor authentication.

authentication-article-on-searchsoftwarequality

Posted by: admin 15 years, 3 months ago

I forgot to mention that I have an article up on SearchSoftwareQuality: Stronger authentication needed for Web applications. Here's the gist:

In this article we consider three authentication processes in a typical complex Web application that requires security, such as online banking or brokerage transactions:

top-9-reasons-to-embrace-two-factor-authentication

Posted by: admin 15 years, 3 months ago

Passwords have been around forever and it's starting to show. The next level of authentication security is two-factor authentication. Your ATM card is an example of two-factor authentication: you need both possession of the card and knowledge of the PIN to get cash. There are a number of factors that are pushing two-factor authentication toward a tipping point.

article-published

Posted by: admin 15 years, 3 months ago

I had an article published, this time over as SearchSecurity. Attacks illustrate need for stronger authentication.

anonymous-two-factor-authentication-as-a-turing

Posted by: admin 15 years, 3 months ago

You can now add comments to the blog, but you must first prove to me that you are a human by logging in using WiKID Strong Authentication. Interestingly, this is still anonymous, because I am using the Token Client Test domain, which requires no identification to configure (it was set up as a simple way to test the WiKID token clients). So, it is an anonymous two-factor authentication CAPTCHA of sorts.

• Page 36 of 51
• ←
• 29
• 30
• 31
• 32
• 33
• 34
• 35
• 36
• 37
• 38
• 39
• 40
• 41
• 42
• 43
• →