Quantcast
Channel: Comments on: Securing SSH and WordPress with two factor authentication
Browsing latest articles
Browse All 8 View Live

By: hilton

The passwords that Yubikey generates when in OTP mode can be stored and then used later, hence they are not strictly one time passwords. This means that if someone gets hold of your yubikey they can...

View Article



By: nwilkens

Hilton, I posed this question to Yubico, and received the response below. The main point being you can use timedelta information included in the OTP to secure against the attack you describe by...

View Article

By: strahd

Hilton Yubikey is basically encrypting and ever increasing counter within the key. When a server accepts they OTP, it stores the value decrypted from the OTP. It will then never accept a OTP with a...

View Article

By: Matt

There is a new website authentication method https://www.shieldpass.com with a WordPress plugin which is superior to the Yubikey security method. The access cards ($9 delivery included) are placed onto...

View Article
Browsing latest articles
Browse All 8 View Live




Latest Images