E-Mail 'WoW's New Security - Authenticator' To A Friend
// Email a friend
'WoW's New Security - Authenticator'
Loading ...4 Responses to “WoW’s New Security – Authenticator”
Trackbacks/Pingbacks
-
[…] actually not a toy, but the security feature that I talked about awhile back! Well I finally got myself one and its pretty lol! Feels safe to login from remote location too. So […]
Leave a Reply
I’m not quite sure that’s how it works.
One thing I noticed is that it does not work like a RSA token (probably the most familiar of the security tokens). It says in the description that you have to press some button on the authenticator to get your random number. Which to me, implies that it works more like your car keyless remote.
Everytime you press the button, it generates a new number. The authentication backend stores the next 50-100 possible numbers, and if it sees #35 come in, it will invalidate #1-34.
No matter how you look at it, it is better than nothing. It does not, however, offer the same level of security that the corporate-level RSA tokens do.
You are right, it does not uses the RSA token, at least from my understanding.
But I simplified it for explainatory purpose. I notice that at least my key on my own corporate authenticator changes every 20sec, but the key you generate each time is valid for 60sec, for people that type damn slow.
I was under the impression that its got a timer, but its also got to have some way of being unique, hence some people’s theory of generating a number via using the serial of ur authenticator… which doesn’t sound all that impossible/not feasible. But yea, its better than nothing and is sure way better than just using a single-authentication method.
That would be a really welcome method (the authenticator) from what I could skim-read while at work. Would most likely had prevented myself from being hacked after quitting (though I admit it’s not such a big loss now, but still is!).
Now if only SE would take a few tips from Blizzard there wouldn’t be much regretting after all.