[AusNOG] Authentication Tokens [SEC=UNCLASSIFIED]

[Kayne Naughton]

Depends what and who you're protecting against. The Queensland police
have a case documented on their website of a victim's mobile phone being
ported to another provider in order to get the authentication SMS -
http://www.police.qld.gov.au/News+and+Alerts/Media+Releases/2009/02/Inte
rnet+phone+fraud.htm. I'm led to believe this is fairly common overseas
and not an isolated case in Australia.

Regards,
Kayne

-----Original Message-----
From: ausnog-bounces at lists.ausnog.net
[mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Trent Lloyd
Sent: Wednesday, 17 June 2009 2:58 PM
To: ausnog at ausnog.net
Subject: Re: [AusNOG] Authentication Tokens

Please don't - I hate these stupid things at work. :) .. I just avoid
needing the VPN for as much as possible and put off things requiring it
as long as possible.

SMS is a good option .. I'd use that.  Commonwealth bank use that and
it's good for new transactions.

- Trent

On 17/06/2009, at 12:42 PM, Will Dowling wrote:

> Hi list,
>
> I'm currently looking at physical security tokens we can use for a 
> second factor of authentication on our work VPN.
>
> So far we've trialled RSA and it works well using RADIUS, but I wanted

> to see if anyone else on the list had any recommendations they could 
> share?
>
> Cheers :)
>
>
> Will Dowling
>
> T: +61 (0407) 421 559
> F: +61 (08) 6364 4881
> E: will at autodeist.com
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog

If you have received this email in error, please notify the sender immediately and erase all copies of the email and any attachments to it. The information contained in this email and any attachments may be private, confidential and legally privileged or the subject of copyright. If you are not the addressee it may be illegal to review, disclose, use, forward, or distribute this email and/or its contents.
 
Unless otherwise specified, the information in the email and any attachments is intended as a guide only and should not be relied upon as legal or technical advice or regarded as a substitute for legal or technical advice in individual cases. Opinions contained in this email or any of its attachments do not necessarily reflect the opinions of ACMA.