Linux Kernel Git Repositories Add 2-Factor Authentication

yubikeys in the news: "For a few years now Linux kernel developers have followed a fairly strict authentication policy for those who commit directly to the git repositories housing the Linux kernel. Each is issued their own ssh private key, which then becomes the sole way for them to push code changes to the git repositories hosted at kernel.org. While using ssh keys is much more secure than just passwords, there are still a number of ways for ssh private keys to fall into malicious hands. So they've further tightened access requirements with two-factor authentication using yubikeys." -- source: http://linux.slashdot.org/story/14/08/18/191251 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

Well, that should boost the profile of yubico somewhat. So, who's order theirs since my talk on yubikeys? Cheers Chris -----Original Message----- From: wlug-bounces(a)list.waikato.ac.nz [mailto:wlug-bounces(a)list.waikato.ac.nz] On Behalf Of Peter Reutemann Sent: Tuesday, 19 August 2014 10:09 a.m. To: wlug List Subject: [wlug] Linux Kernel Git Repositories Add 2-Factor Authentication yubikeys in the news: "For a few years now Linux kernel developers have followed a fairly strict authentication policy for those who commit directly to the git repositories housing the Linux kernel. Each is issued their own ssh private key, which then becomes the sole way for them to push code changes to the git repositories hosted at kernel.org. While using ssh keys is much more secure than just passwords, there are still a number of ways for ssh private keys to fall into malicious hands. So they've further tightened access requirements with two-factor authentication using yubikeys." -- source: http://linux.slashdot.org/story/14/08/18/191251 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174 _______________________________________________ wlug mailing list | wlug(a)list.waikato.ac.nz Unsubscribe: http://list.waikato.ac.nz/mailman/listinfo/wlug
participants (2)
-
chris
-
Peter Reutemann