3 ms·
Part of this discussion should be how a very large organization called the US Military solved this problem with smart cards. see http://en.wikipedia.org/wiki/C
by harshaw 14y ago
Part of this discussion should be how a very large organization called the US Military solved this problem with smart cards. see http://en.wikipedia.org/wiki/Common_Access_Card http://en.wikipedia.org/wiki/Common_Access_Card.
Those of you how own Dell or HP Computers - you may notice that most of the professional grade laptops have smart card readers built in. My guess is this is due to DoD purchasing requirements. Of course, the MacBook doesn't have a smart card reader and thus you start to look for solutions like the YubiKey.
- mpyne 14y agoOr a bum-standard card reader. The DoD CAC is actually supported on Linux too (w/ Firefox) if you know the right incantations.
- rficcaglia 14y agoand smart cards cannot be hacked! oh wait... http://www.darkreading.com/authentication/167901072/security/attacks-breaches/232400288/sykipot-malware-now-steals-smart-card-credentials.html http://www.darkreading.com/authentication/167901072/security... i guess we need 3 factor authentication, yeah, that's the ticket!
- dpark 14y agoThe military didn't solve the problem. They solved an easy variation. The problem is not just "How do I make it easy and secure to access the systems I control?" but "How do I make it easy and secure to access all systems?" The military implemented 2-factor auth and unified their systems to support it. This is very nice, but doesn't solve the broader problem. Military employees are still struggling with the same "million not-very-secure passwords I can't remember" problems as civilians, because they military does not control all or even most of the systems they interact with.