4 ms·
Use physical tokens. Passwords is not the future.
by pishpash 4y ago
Use physical tokens. Passwords is not the future.
- MBCook 4y agoIs that an option for the root password on Linux?
- SkyMarshal 4y agoYeah, for example: https://support.yubico.com/hc/en-us/articles/360018695819-Ubuntu-Linux-20-Login-Guide-Challenge-Response https://support.yubico.com/hc/en-us/articles/360018695819-Ub...
- Hackbraten 4y agoWhat would keep a side-channel attacker from reading your YubiKey PIN from kernel memory, and then racing all your authentication attempts until it manages to win the physical button event?
- SkyMarshal 4y agoNothing maybe. But if a side-channel attack gains access to kernel memory, they can do just about anything, and no login scheme is secure against that.