Republic / keys to multifactorial authentication against PHISHING JOURNAL!



[ad_1]

youtube.com/LogicLounge

Security Key

Namely, since its 85,000 employees were asked to use physical security keys, and instead of a unique code, Google's n & # 39, registered no phishing attacks.

Such keys, like the one produced by Yubikey, make it easy to connect to a website, insert a USB stick, and click the button. Thus, the user does not need to enter passwords, these generic codes. Although this system has some weaknesses, since it relies on an easily lost physical key, it is considered to be more secure than two-factor authentication, particularly that which the user receives via SMS, as hackers can override the message is sent to the phone, and thus access to the command.

Unfortunately, the Universal 2nd Factor (U2F) type multifactor authentication used by the physical key is still limited and supported on Chrome, but for Firefox, for example, requires manual activation, and more of "About from: config. " Microsoft's U2F support for Edge browser plans by the end of 2018, and Apple has not yet announced whether Safari will ever support this authentication standard. On the other hand, only a few sites are supported by U2F, including Facebook, and password managers such as Keepass and LastPass.

It remains to be seen whether the positive Google experience on Google will affect the adoption of the standard at all levels, and this is a cautious testimony of the best way to protect reasonable orders.

[ad_2]
Source link