Collaborate Disseminate
Will using WebAuthn for an application make it two factor? I am specifically interested in using Ondevice biometrics and achieve passwordless authentication.
For a true two factor authentication you need one to use two of the three forms… Continue reading Is using WebAuthn alone considered as two factor authentication?
In time for the New Year, David Strom shares seven things security professionals need to be thinking about and how they could impact their organization.
The post 7 Security Trends to Watch in the New Year appeared first on Security Boulevard.
Continue reading 7 Security Trends to Watch in the New Year
I just installed the Windows 10 1809 update, which includes support for FIDO2 passwordless sign-in. I own a Yubikey 5, which supports this standard. However, I am not able to set up Windows Hello, a prerequisite for FIDO2 sig… Continue reading FIDO2 on Windows: Why do I need a TPM?
“Password-killing” authentication efforts may be on a road to nowhere. Continue reading Passwords: Here to Stay, Despite Smart Alternatives?
A FIDO U2F Device relies on public/private keys. Do they expire like in regular x509 certificates ?
According to the Google information page here: https://support.google.com/accounts/answer/6103523
If you don’t have another second step or forgot your password
Note:
2-Step Verification requires an extra step to p… Continue reading Are FIDO U2F keys (like dual Yubikeys or dual Google Titan keys) undermined by the Google account recovery process?
Recently, the FIDO Alliance (Fast Identity Online) announced the availability of its FIDO2 protocol. What is this, how does it impact the traditional login password, and why should financial institutions (FIs) pay attention? FIDO: Eliminating the Trad… Continue reading FIDO2: The Passwordless Web is Coming
I’ve just been reading some posts about FIDO support (or the lack thereof) in password managers and want to check whether my understanding is correct.
My understanding of FIDO (v1) is that the device contains a secret that it will never l… Continue reading password managers and FIDO
Is it possible for an infected endpoint to steal private keys from a FIDO U2F Hardware Token / Yubikey? What attacks exist against these hardware tokens? What mitigations are possible? For the scope of this question it’s limi… Continue reading Can an infected endpoint steal private keys from a FIDO U2F Hardware Token / Yubikey?
Bluetooth bug allows man-in-the-middle attacks on phones and laptops, serial killer electrocutes himself in jail cell sex act, Google launches its own USB-based FIDO U2F keys, and GhostPack. Full Show Notes Subscribe to YouTube Channel
The post Bluetoo… Continue reading Bluetooth Bug, Tenable, and Cosco – Paul’s Security Weekly #569