A (not) new security idea

[Jude]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 13 October 2004 20:36, Brian Fahrlander wrote:

>     Keyfobs.  These little USB droplets of cyberspace.  How about we, as
> one of the largest collections of Linux people out there, standardize
> some software to fit into PAM to do this:
>
>     1. Upon insertion, ask for the passphrase a'la local-agent.
>
>     2. When validated, use these credentials for everything.
>
>     Sounds like a simple idea, but for some reason the powers that be
> can't seem to 'get off the pot' and placate hundreds of vendors to
> define a standard.  Standards are what we're about.  Let's make our
> own.

As a starting point, you might want to look at pam_usb, "a PAM module that
enables authentication using a USB storage device through DSA
private/public keys."

http://freshmeat.net/projects/pam_usb/

HTH

Jude

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBbfavF0ii4UPWAS0RAv7xAJ4/MEhIkeZucaGKX/ITUMi9YlWmfACeMXR2
lzo2pl67x0HG/fwa+FFAw8A=
=Nzu8
-----END PGP SIGNATURE-----