3 ms·
This is actually why two factor authentication is great. In this instance, users were still protected (at the least) by their PIN. This is somewhat equivalent
by majelix 14y ago
This is actually why two factor authentication is great. In this instance, users were still protected (at the least) by their PIN.
This is somewhat equivalent to losing your ssh private key. Yes, it's bad, but your passphrase should ("should" -- at least it's not an immediate breach like losing a password or clear text private key) buy you enough time to revoke and replace the key.
- TheCapn 14y agoExactly. Until we can come up with a better system the rule of thumb is: 1) Know something 2) Have something Its somewhat easy for a potential cracker to gain access to either one of the two, but extremely difficult to have both. Hell, when I used SecurID at one of my first jobs you had a PIN to go with the token number, almost like a salt to your password. Even if they had the key they wouldn't be able to access my accounts.