scox.info - Random Thoughts - one time pads - Comments

[ping] One Time Pads: The new authentication model of pam_usb - What are ohio's agricultural products.

What are ohio's agricultural products. — Wed, 07 Jan 2009 00:47:29 +0100

What are ohio's agricultural products.

What are ohio's agricultural products....

[ping] One Time Pads: The new authentication model of pam_usb - As panteras porno cassetada

As panteras porno cassetada — Sun, 21 Sep 2008 14:19:58 +0200

As panteras porno cassetada

Adatessac, as panteras porno cassetada and as...

[ping] One Time Pads: The new authentication model of pam_usb - Free wife swapping stories

Free wife swapping stories — Sun, 31 Aug 2008 00:22:51 +0200

Free wife swapping stories

Seirots, free wife swapping stories and free...

[ping] One Time Pads: The new authentication model of pam_usb - Ultravixen pixies interactives

Ultravixen pixies interactives — Sat, 30 Aug 2008 02:05:58 +0200

Ultravixen pixies interactives

Sevitcaretni, ultravixen pixies interactives and ultravixen...

[ping] One Time Pads: The new authentication model of pam_usb - Wwwputas maduras com

Wwwputas maduras com — Fri, 29 Aug 2008 23:40:56 +0200

Wwwputas maduras com

Moc, wwwputas maduras com and wwwputas...

[ping] One Time Pads: The new authentication model of pam_usb - Eepstill 0 olds arred

Eepstill 0 olds arred — Fri, 29 Aug 2008 20:55:13 +0200

Eepstill 0 olds arred

Derra, eepstill 0 olds arred and eepstill...

One Time Pads: The new authentication model of pam_usb - Jeremy

Jeremy — Tue, 26 Aug 2008 04:59:17 +0200

So say I manage to kill my one-time-pad accidentally. How do I force regenerating a new one?

[ping] One Time Pads: The new authentication model of pam_usb - Top thrill dragster roller coaster

Top thrill dragster roller coaster — Sun, 24 Aug 2008 04:22:00 +0200

Top thrill dragster roller coaster

Retsaoc, top thrill dragster roller coaster and top...

[ping] One Time Pads: The new authentication model of pam_usb - Large breasts public pictures

Large breasts public pictures — Sat, 23 Aug 2008 22:05:09 +0200

Large breasts public pictures

Serutcip, large breasts public pictures and large...

[ping] One Time Pads: The new authentication model of pam_usb - Naked beautiful woment

Naked beautiful woment — Thu, 21 Aug 2008 12:42:15 +0200

Naked beautiful woment

Tnemow, naked beautiful woment and naked...

[ping] One Time Pads: The new authentication model of pam_usb - Download greek vovies free

Download greek vovies free — Wed, 20 Aug 2008 21:53:26 +0200

Download greek vovies free

Eerf, download greek vovies free and download...

[ping] One Time Pads: The new authentication model of pam_usb - Gay boxer underwaer

Gay boxer underwaer — Wed, 20 Aug 2008 13:03:40 +0200

Gay boxer underwaer

Reawrednu, gay boxer underwaer and gay...

[ping] One Time Pads: The new authentication model of pam_usb - Uneraged sex pictures

Uneraged sex pictures — Tue, 19 Aug 2008 19:38:10 +0200

Uneraged sex pictures

Serutcip, uneraged sex pictures and uneraged...

[ping] One Time Pads: The new authentication model of pam_usb - Accidental anal movies

Accidental anal movies — Tue, 19 Aug 2008 09:14:58 +0200

Accidental anal movies

Seivom, accidental anal movies and accidental...

[ping] One Time Pads: The new authentication model of pam_usb - Vitamin overdose adek

Vitamin overdose adek — Tue, 19 Aug 2008 09:14:53 +0200

Vitamin overdose adek

Keda, vitamin overdose adek and vitamin...

[ping] One Time Pads: The new authentication model of pam_usb - German granny thumb

German granny thumb — Tue, 19 Aug 2008 09:14:48 +0200

German granny thumb

Bmuht, german granny thumb and german...

[ping] One Time Pads: The new authentication model of pam_usb - Kamavasna sex stories

Kamavasna sex stories — Tue, 19 Aug 2008 09:14:45 +0200

Kamavasna sex stories

Seirots, kamavasna sex stories and kamavasna...

[ping] One Time Pads: The new authentication model of pam_usb - Nenas pollando

Nenas pollando — Mon, 18 Aug 2008 19:44:53 +0200

Nenas pollando

Odnallop, nenas pollando and nenas...

[ping] One Time Pads: The new authentication model of pam_usb - Horny housewifes over 40

Horny housewifes over 40 — Sun, 17 Aug 2008 22:28:52 +0200

Horny housewifes over 40

04, horny housewifes over 40 and horny...

[ping] One Time Pads: The new authentication model of pam_usb - Teencumeater classic

Teencumeater classic — Fri, 15 Aug 2008 23:26:28 +0200

Teencumeater classic

Cissalc, teencumeater classic and teencumeater...

[ping] One Time Pads: The new authentication model of pam_usb - Grils giving blow jobs

Grils giving blow jobs — Fri, 15 Aug 2008 22:21:56 +0200

Grils giving blow jobs

Sboj, grils giving blow jobs and grils...

[ping] One Time Pads: The new authentication model of pam_usb - Interrcail sex

Interrcail sex — Thu, 14 Aug 2008 00:46:07 +0200

Interrcail sex

Xes, interrcail sex and interrcail...

[ping] One Time Pads: The new authentication model of pam_usb - 2 mg alprazolam blue round

2 mg alprazolam blue round — Sun, 27 Jul 2008 10:21:15 +0200

2 mg alprazolam blue round

Dnuor, 2 mg alprazolam blue round and 2...

[ping] One Time Pads: The new authentication model of pam_usb - Buy alprazolam 2mg

Buy alprazolam 2mg — Sun, 27 Jul 2008 10:21:12 +0200

Buy alprazolam 2mg

Gm2, buy alprazolam 2mg and buy...

[ping] One Time Pads: The new authentication model of pam_usb - Buy alprazolam home delivery

Buy alprazolam home delivery — Sun, 27 Jul 2008 10:21:08 +0200

Buy alprazolam home delivery

Yreviled, buy alprazolam home delivery and buy...

[ping] One Time Pads: The new authentication model of pam_usb - Valsa ambiens populus

Valsa ambiens populus — Sun, 27 Jul 2008 10:21:04 +0200

Valsa ambiens populus

Sulupop, valsa ambiens populus and valsa...

[ping] One Time Pads: The new authentication model of pam_usb - Atomoxetine hydrochloride.

Atomoxetine hydrochloride. — Fri, 18 Jul 2008 23:53:05 +0200

Atomoxetine and drug abuse liability.

Atomoxetine. Eli lilly atomoxetine hci. Atomoxetine and drug abuse liability....

One Time Pads: The new authentication model of pam_usb - Norbert Klamann

Norbert Klamann — Sun, 08 Apr 2007 20:46:00 +0000

What happens if the attacker is the first one to autheniticate ? Imangine the following timeline:

My USB device lays on the desk, I am not logged in at the moment
Attacker copies the USB-Stick and autheniticates.
I try to authenticate. Ooops !

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

As the pads won't match anymore, you will know that you have been compromised and you will be prompted for your usual password.

You can avoid this kind of problem by using two-factor authentication. In such case, you will be asked for a password before the USB authentication, which means that the attacker must know your password in order to update the pads.

One Time Pads: The new authentication model of pam_usb - justme

justme — Sun, 08 Apr 2007 20:46:00 +0000

Use 2 sticks. One holding the One Time Pad authentication and the other as a "Mold". Make the One Time Pad authentication time sensitive (really expiring after 2 minutes or 5 hours or 6 weeks) after which you can only use the "mold" together with the other usb stick to login. Both used seperate are useless (after expiration of the One Time Pad). Store them on different locations and you have your solution.

One Time Pads: The new authentication model of pam_usb - justme

justme — Sun, 08 Apr 2007 20:46:00 +0000

If flash drives are unique why not use that and store the One Time Pad on de hdd. Then there would be nothing to copy. The One Time Pad would still have to work as I wrote above. It still needs to expire.

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

I don't think pads should ever expire. Actually, they already do: as soon as you authenticate, the old pad isn't valid anymore.

I didn't understand the second comment about storing pads on the hard drive as they currently do. Pads are stored both on the flash drive and the hard drive and compared upon authentication.

One Time Pads: The new authentication model of pam_usb - justme

justme — Sun, 08 Apr 2007 20:46:00 +0000

I think it's a good project and I just got carried away by my enthousiasme.Forget about my second comment. It wasn't well thought out. Using just the flash drives unique ID to login (the pad on the hdd would be compared with just the unique ID on that flash drive) would make you loose a lot of flexibility.Looking forward to your next release.

One Time Pads: The new authentication model of pam_usb - chief

chief — Sun, 08 Apr 2007 20:46:00 +0000

Isn't writing one-time pad onto USB flash disk upon each authentication going to shorten its lifetime? And by how much, any estimates or experiences? I have been using old pam_usb 3.3 for some time now, had been happy with it, and now I am reluctant to upgrade given this sole issue. Please advise. Thank you.

One Time Pads: The new authentication model of pam_usb - chief

chief — Sun, 08 Apr 2007 20:46:00 +0000

I meant 0.3.3, sorry.

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

I assume it will shorten its lifetime, but i don't know how much. Anyway, I'm planning to introduce a new option to set how often pads should be updated (e.g., limit once everyday).

In the meantime, you could disable pads. I think pam_usb 0.4.x is more secure than 0.3.x even with pads disabled, because it does model/vendor/serial verification.

One Time Pads: The new authentication model of pam_usb - some guy on the street

some guy on the street — Sun, 08 Apr 2007 20:46:00 +0000

Variations on two-factor auth; How about, as with ssh key-based authentication, the /private/ key is locked with a password? or similarly the public copy of a pad may be password-encrypted.

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

That's two factor authentication which can already be achieved by coupling pamusb and pamunix in the PAM configuration.

One Time Pads: The new authentication model of pam_usb - Nicholas

Nicholas — Sun, 08 Apr 2007 20:46:00 +0000

It would be better to have a mix of the two methods: an ssl key together with pads. You see, not every single USB key out there has a serial number. Mine doesn't, and anybody who has a key of the same model could potentially forge the authentication.

Another thing you don't specify anywhere in the documentation, is if the authentication is restricted on localhost, or if it's available even to remote connections. I'd hate somebody logging in to my SSH as root without even bothering entering a password :) Please don't tell me to use SSL keys on ssh, I already do, but I found the example intriguing: just think about how many novice users intall every package on their distro and connect to the 'net without a proper firewall.

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

Even if someone has the same model as yours wouldn't have the same pads thus will be rejected in the authentication process.

My bad, I should've specified this in the documentation: the authentication is restricted to localhost. SSH won't authenticate someone through pam_usb. Even issueing commands such as "su" through SSH will ask for a passwod.

One Time Pads: The new authentication model of pam_usb - Thomas

Thomas — Sun, 08 Apr 2007 20:46:00 +0000

pam_usb assumes the existence of pmount on the system, but pmount is not listed in the requirements. Maybe you could correct that, and since pmount is nonstandard on many distributions, maybe you can find a way to replace it?

One Time Pads: The new authentication model of pam_usb - scox

scox — Sun, 08 Apr 2007 20:46:00 +0000

Fixed the documentation.

I'll try to find a way not to depend on pmount anymore, but the problem is mounting a volume requires root privilegies which will fail with screensavers and other applications running as user (and that's when pmount comes handy).

One Time Pads: The new authentication model of pam_usb - cao.shijun

cao.shijun — Sun, 08 Apr 2007 20:46:00 +0000

Good job!thank you Scox!