3 ms·

It's definitely not a fool proof or airtight system, but it's going to be at least a little time consuming to figure out the mechanism. Sure, a concerted effor

It's definitely not a fool proof or airtight system, but it's going to be at least a little time consuming to figure out the mechanism. Sure, a concerted effort will still break it, but you can protect yourself a bit more from a "0-day" hack than the alternatives: same password everywhere. We definitely need better authentication methods. For example, why couldn't Google open up their 2 factor authentication method? Why is it that my battle.net account can have better security than my bank account? Frustrating!

krrrh 14y ago
Googles two-factor authentication system is open sourced. https://code.google.com/p/google-authenticator/ https://code.google.com/p/google-authenticator/ They include a JavaScript implementation and a PAM module. In fact, Dreamhost just implemented two factor auth that uses the Google Authenticator app last week. It works really well. http://wiki.dreamhost.com/Enabling_Multifactor_Authentication http://wiki.dreamhost.com/Enabling_Multifactor_Authenticatio... In addition, Clavid OpenID integrates with the Google Authenticator app if you're an openID user. I've been looking at the Yubikey+LastPass combo, which can also integrate with Google two-factor if you install a helper app. It seems like a nice solution, except that I'm really not a fan of the LastPass user experience.