3 ms·
Yep. It's often users' magical thinking combined with charlatans trying to sell them a panacea. 1. Can't be tied to just one device - Must have backup codes or
by 1letterunixname 3y ago
Yep. It's often users' magical thinking combined with charlatans trying to sell them a panacea.
1. Can't be tied to just one device - Must have backup codes or multiple devices that can act as the same to prevent lockout and aid legitimate recovery.
2. No biometrics - Doesn't survive rubber-hose cryptanalysis. Easily impersonated.
I would add the following:
4. Unable to operate without my interactive, explicit permission.
5. Not a device left online 24/7. Preferably detachable.
6. Not an NFC.
Congratulations, we've just reinvented the emperor's new clothes with very long CSHWRNG-generated passwords or key files, password managers, FIDO2 hardware devices, and backup codes.
- Turing_Machine 3y ago> 2. No biometrics - Doesn't survive rubber-hose cryptanalysis. Easily impersonated. Also, biometrics generally can't be revoked. Not nearly enough attention is paid to that, and it's very important, IMO. In the extreme case, let's say you're using actual DNA. On the surface, that looks impregnable to anyone but maybe your identical twin (barring the "rubber hose" thing, of course). In practice, anyone who's hacked a genealogy site (as happened quite recently with 23andMe, IIRC), or who's managed to grab your used coffee cup or cigarette butt pwns you forever.