Channel 9 Forums - Coffeehouse - USB over password? did i just missed something? http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 Forums - Coffeehouse - USB over password? did i just missed something? http://channel9.msdn.com/Forums Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Forums en Mon, 20 May 2013 03:30:54 GMT Mon, 20 May 2013 03:30:54 GMT Rev9 10 -10 -1 Coffeehouse - USB over password? did i just missed something? I thought it is common sense that USB is the last thing you want to touch in regards to security. And people actually trying to consolidate their password into a single attack surface on a USB device that can easily be cloned or modified or misplaced. On top of that, the famous power plant virus is USB based regardless how the system is build with high security protection. And not to mention it is also sounds a lot more reasonable to ask for new USB when it is physically misplaced, as a know some people tends to lost their keys a lot more than they forgot their password. I really don't know what is going on with these people.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/ba3500f4b5834f1b96bea14a015a2204#ba3500f4b5834f1b96bea14a015a2204 Fri, 18 Jan 2013 21:00:13 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/ba3500f4b5834f1b96bea14a015a2204#ba3500f4b5834f1b96bea14a015a2204 magicalclick 10 http://channel9.msdn.com/Niners/magicalclick/Discussions/RSS Coffeehouse - USB over password? did i just missed something? @magicalclick: Is there a link or some context to go with this? It sounds interesting, but I have no idea what you are talking about. USB device as an authentication device? Storing passwords on a USB drive?

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/0263015b25f94a6b9830a14a0162e9ca#0263015b25f94a6b9830a14a0162e9ca Fri, 18 Jan 2013 21:32:11 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/0263015b25f94a6b9830a14a0162e9ca#0263015b25f94a6b9830a14a0162e9ca kettch 10 http://channel9.msdn.com/Niners/kettch/Discussions/RSS Coffeehouse - USB over password? did i just missed something? There are a few products that do this... or can do this as an option: http://www.dobysoft.com/products/keypass/

 

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/25419f66d99e44a8a842a14a016d5c0d#25419f66d99e44a8a842a14a016d5c0d Fri, 18 Jan 2013 22:10:14 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/25419f66d99e44a8a842a14a016d5c0d#25419f66d99e44a8a842a14a016d5c0d Duncan Mackenzie 10 http://channel9.msdn.com/Niners/Duncanma/Discussions/RSS Coffeehouse - USB over password? did i just missed something? Here. http://www.engadget.com/2013/01/18/google-experiments-with-hardware-based-authentication/

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/4280c84fabe14a5fa08ca14a0183c7d5#4280c84fabe14a5fa08ca14a0183c7d5 Fri, 18 Jan 2013 23:31:51 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/4280c84fabe14a5fa08ca14a0183c7d5#4280c84fabe14a5fa08ca14a0183c7d5 magicalclick 10 http://channel9.msdn.com/Niners/magicalclick/Discussions/RSS Coffeehouse - USB over password? did i just missed something? I remember there's already software for Mac like 10+ years ago that use bluetooth device (headset or mobile phone, etc.) to do that. When the device is not within range (disconnected) that screen will lock immediately. When that devicee is within range again the screen is automatically unlocked. With old bluetooth's receiving range this is pretty nice help for people who keep forgetting to lock their PC when not in use.

I suppose others can make similar application to work with RFID enabled staff cards.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/84577a19157941198ccfa14b00158edb#84577a19157941198ccfa14b00158edb Sat, 19 Jan 2013 01:18:29 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/84577a19157941198ccfa14b00158edb#84577a19157941198ccfa14b00158edb cheong 10 http://channel9.msdn.com/Niners/cheong/Discussions/RSS Coffeehouse - USB over password? did i just missed something?

, cheong wrote

I suppose others can make similar application to work with RFID enabled staff cards.

Wasn't HP showing off something like that with the Spectre ONE and a phone? Or was it just with a tag. I'd prefer if I could tap my phone on an NFC sensor and then have the phone ask for a PIN before it let the PC unlock.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/ca28d1bdba2f4a1995c2a14b006f587e#ca28d1bdba2f4a1995c2a14b006f587e Sat, 19 Jan 2013 06:45:23 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/ca28d1bdba2f4a1995c2a14b006f587e#ca28d1bdba2f4a1995c2a14b006f587e kettch 10 http://channel9.msdn.com/Niners/kettch/Discussions/RSS Coffeehouse - USB over password? did i just missed something? Not exactly. I don't want to tap it. I wish it can unlock for me when I come near, so when my fingertips are on keyboard, it should be ready to work.

I think it could be done with the RFID technology like the one on passports.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/1008490639594a13abe5a14d002ea8b5#1008490639594a13abe5a14d002ea8b5 Mon, 21 Jan 2013 02:49:52 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/1008490639594a13abe5a14d002ea8b5#1008490639594a13abe5a14d002ea8b5 cheong 10 http://channel9.msdn.com/Niners/cheong/Discussions/RSS Coffeehouse - USB over password? did i just missed something?

, magicalclick wrote

I thought it is common sense that USB is the last thing you want to touch in regards to security. And people actually trying to consolidate their password into a single attack surface on a USB device that can easily be cloned or modified or misplaced. On top of that, the famous power plant virus is USB based regardless how the system is build with high security protection. And not to mention it is also sounds a lot more reasonable to ask for new USB when it is physically misplaced, as a know some people tends to lost their keys a lot more than they forgot their password. I really don't know what is going on with these people.

You didn't understand the article. It's not "USB over password", it's USB key + password. This is two factor authentication, and it's more secure than simple passwords. Hijacking/cloning the USB key isn't going to get the hackers anywhere, so that's simply not a concern.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/e0629272c3fa4da8b7c3a14e010dc9df#e0629272c3fa4da8b7c3a14e010dc9df Tue, 22 Jan 2013 16:22:16 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/e0629272c3fa4da8b7c3a14e010dc9df#e0629272c3fa4da8b7c3a14e010dc9df William Kempf 10 http://channel9.msdn.com/Niners/wkempf/Discussions/RSS Coffeehouse - USB over password? did i just missed something? @wkempf: oh my bad, my title is a misrepresentation.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/17ec5b4328f7486da301a14e0116326c#17ec5b4328f7486da301a14e0116326c Tue, 22 Jan 2013 16:52:53 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/17ec5b4328f7486da301a14e0116326c#17ec5b4328f7486da301a14e0116326c magicalclick 10 http://channel9.msdn.com/Niners/magicalclick/Discussions/RSS Coffeehouse - USB over password? did i just missed something?

, magicalclick wrote

@wkempf: oh my bad, my title is a misrepresentation.

It was more than the title. The entire post was full of comments like "trying to consolidate their password into a single attack surface" and "that can easily be cloned or modified or misplaced". That's not how these USB authentication devices work. They just take the "something I have" role in two factor authentication. Losing the device, having it stolen, or having it cloned are all non-issues, at least from a security perspective. If you lose the device you will have to replace it and update all programs/services that you authenticate to, which could be a hassle. But the end result is better security.

]]> http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/bb2096c754d24714b3e4a14e012aab83#bb2096c754d24714b3e4a14e012aab83 Tue, 22 Jan 2013 18:07:25 GMT http://channel9.msdn.com/Forums/Coffeehouse/USB-over-password-did-i-just-missed-something/bb2096c754d24714b3e4a14e012aab83#bb2096c754d24714b3e4a14e012aab83 William Kempf 10 http://channel9.msdn.com/Niners/wkempf/Discussions/RSS