Re: [OT] how secure is 2 factor auth with a smartphone?

2017-12-14 Thread Martin Schröder
2017-12-14 3:16 GMT+01:00 Alceu Rodrigues de Freitas Junior : > What do you guys think about? Do you agree with the article author opinion? It's probably more secure than your typical RSA token, which had numerous security issues (including opening up the seeds!) in the

Re: [OT] how secure is 2 factor auth with a smartphone?

2017-12-14 Thread Kamil Cholewiński
> Re: [OT] how secure is 2 factor auth with a smartphone? Not very much. Phones are easy to lose, break (which means 2nd factor recovery must be relatively painless == lowest common denominator), etc. For services that insist on 2FA, I have a script that calls oathtool and copies the c

Re: [OT] how secure is 2 factor auth with a smartphone?

2017-12-14 Thread Lea Chescotta
age > Subject: [OT] how secure is 2 factor auth with a smartphone? > Local Time: December 13, 2017 11:16 PM > UTC Time: December 14, 2017 2:16 AM > From: glasswal...@yahoo.com.br > To: misc@openbsd.org > > Hello guys, > > I apologize if the subject is too much out of to

[OT] how secure is 2 factor auth with a smartphone?

2017-12-13 Thread Alceu Rodrigues de Freitas Junior
Hello guys, I apologize if the subject is too much out of topic for this list. Today I was surprised by hearing from a security (?) tech guy that using 2 factor authentication with AWS was not problem at all when using a smartphone not provided by the company (my own, in the case) that has