Idlemind - nickcoster.com
Future gazing from a quiet corner of cyberspace.

I have just posted the comment below in response to this article

Bruce Schneier’s article http://www.schneier.com/essay-083.html implies that two-factor authentication is too out dated to be of any real use.

I believe that this is a very dangerous argument to be promoting, particularly since the existing username and password security that every service currently uses is not enough and criminals are easily compromising this fact already. In my experience the biggest hurdle is the get organisations to spend any money on any more advanced security solution.

Although second factor authentication using one-use changing passwords from a token device or from an SMS, can be compromised by some increasingly sophisticated attacks, they do stop most of the common existing ones. Key stroke loggers, standard phishing and other methods of just stealing static passwords can currently be used to passively generate databases of stolen login details. They become obsolete with the implementation of second factor authentication.

I also believe that online businesses are at the threshold of a new phase of development where the old username and password combination will be complemented with increasingly sophisticated levels of security solutions. These businesses must invest in these solutions and their customers must be given a choice over the usage of them. The penalty for choosing not to use them may be limited functionality or increased costs elsewhere.

Second factor authentication will not be the final solution for online security but it is the most mature solution for the next phase of security developments.

Less than 100 minutes.

I have better do the math and work out what average time I need finish the Sydney Half Marathon in under 100 minutes, a time that has so far eluded me.

Ouch. I have to run between 4.5 and 4.9 minutes per km pace. what that means is that I have to really step up my training. I have been running with my brother, who is just starting a long climb to fitness. He is doing really well and is running distances with me that I didn’t think that he woudl be comfortable with at this stage.

The only problems with this is that I am running too slowly to really help my training. I have to get in at least 3 runs in a week. At the moment I am only doing one at best, and that has been with bro.

The last run we did was about 13km and we finished in 1hr 28min. Which was actually an amazing improvement for Bro, who added a km to the previous run and shaved 2 minutes off the total time. I’ll have to get out and do a long one one sunday on my own. It might be good to get out and run the course.