5 ms·
> Basically, this is an extremely secure, 2 form factor, idiot proof login system As far as I know, factors are 1. Something you know (password) 2. Somethin
by juriansluiman 11y ago
> Basically, this is an extremely secure, 2 form factor, idiot proof login system
As far as I know, factors are
1. Something you know (password)
2. Something you have (a dongle or phone)
3. Something you are (iris or fingerprint)
With only pressing a button on a phone, how can this be two-factor? There is no password ("passwords are obsolete" and usernames are not a knowledge factor in multi auth) and nothing of biometrics. Am I missing something?
By the way, not entering passwords is a fantastic way to login. I have been using the Passwordless [1] method for some time and it works great.
[1]: https://passwordless.net/ https://passwordless.net/
- chrisfarms 11y agoI guess if the phone has a pin/pattern unlock... that could be argued as the "something you know" part.
- snupa 11y agoyes, currently the app has an optional pin unlock that you can set per profile. However, we're looking to add additional "something you know"'s on the user's part to minimize unauthorized access to the device.
- nodata 11y agoPerhaps the timing of the press is a factor.
- mfoy_ 11y agoI suspect some people have started to assume that "two-factor authentication" literally just means "phone/dongle".
- jackreichert 11y agoThe very fact that they claim that makes me uncomfortable with their knowledge of security.
- nly 11y agoThis definition of multi-factor is a bit of a myth. All of those 3 things are something you 'know' in the sense that they all boil down to secret keys. Your dongle or phone stores a key. Your fingerprint and iris can be copied (scanned and stored digitally)