Securix control: implement native 2FA support

[martinholovsky]

At this moment seems to be best candidate https://github.com/google/google-authenticator

pros

• another security layer which limit/block brute-force attacks
• clients on multiple devices (ios, android, ...)
• free
• trusted company
• linux pam module available

cons

• no desktop client
• linux pam module needs to be very well tested in all situations, so system will not become unmanageable

notes

• would be fine if QR could be printed in terminal
• or new type of QR for consoles (something like SSH key randomart)

[adrelanos]

Does this require installing non-Free (closed source) stuff?

trusted company

I am sure many will disagree here.

[martinholovsky]

Hi,
I dont think that there is company which is doing more for security... please check google security blog, then check who from security experts is working for google (shneier, j00ru, ... many others ...) and who found one of the biggest portion of security issues in majority of commonly used applications (google security team members)...

[martinholovsky]

Seems that Shneier not anymore, nevertheless there are tens of others...