<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div><div>On Aug 17, 2014, at 8:42 AM, Paul Madore <<a href="mailto:henrypaulmadore@gmail.com">henrypaulmadore@gmail.com</a>> wrote:</div><blockquote type="cite"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">As to passwords, what about a two step auth system which involved both password and possession of a data file.</span></blockquote></div><div><br></div>As an aside, can we really call it two-factor when both elements are knowledge factors (AFAIK, a data file is also considered such)? Seeing as most attacks that capture the password can trivially also capture the data file.<br><div>
<div style="font-family: 'Euphemia UCAS'; font-size: 13px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px; color: rgb(68, 68, 68);"><br class="Apple-interchange-newline">— Maarten Billemont (lhunath) —</div><div style="font-family: 'Euphemia UCAS'; font-size: 13px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; margin: 0px; color: rgb(71, 135, 255);"><span style="color: rgb(153, 153, 153);">me: <a href="http://www.lhunath.com/">http://www.lhunath.com</a> – business: <a href="http://www.lyndir.com/">http://www.lyndir.com</a> – <a href="http://masterpasswordapp.com/">http://masterpasswordapp.com</a></span></div>
</div>
<br></body></html>