Now that multi factor authentication is gaining ground I thought I would write a simple guide on how to secure administrative access with MFA on Linux systems. The solution is simple and based on Google Authenticator. The good thing with Google Authenticator is that it's a typical TOTP/HOTP solution and as such does not require any internet connectivity on either the server or the client. The configuration examples provided are more or less appropriate for openSUSE Leap 15 and Ubuntu 18.04 LTS
When multi-factor will not save you
Posted on Sunday, 19th of August 2018 • security • permanent link •Read time: 11 minutesThere is a lot of discussion lately about multi-factor authentication and how this will upgrade everyone's security. Indeed, it is an improvement and it was about time we start becoming more conscious about the security issues related to authentication. As usually though, these discussions generated a lot of confusing and "why it didn't work" moments when we see cases such as Reddit's hack in August of 2018.
Stop remembering passwords
Posted on Sunday, 3rd of April 2016 • security • permanent link •Read time: 3 minutesWhat do you do with your passwords? Are you one of the persons who are using a password manager for their web sites' credentials? Yes, me too.