<?xml-stylesheet type="text/xsl" href="https://community.element14.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Blog - All Comments</title><link>/technologies/security/b/blog</link><description /><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Authenticators share your experience with 2FA</title><link>https://community.element14.com/technologies/security/b/blog/posts/authenticators-share-your-experience-with-2fa</link><pubDate>Fri, 10 Mar 2023 05:10:16 GMT</pubDate><guid isPermaLink="false">93d5dcb4-84c2-446f-b2cb-99731719e767:1b60a027-e0f3-4fd0-91c4-313cd957b00a</guid><dc:creator>shabaz</dc:creator><slash:comments>2</slash:comments><description>&lt;p&gt;Hi Sean,&lt;/p&gt;
&lt;p&gt;It&amp;#39;s hard to know for sure precisely what happened since you mention it was a mistake in their account setup, but regarding this bit:&lt;/p&gt;
&lt;p&gt;&amp;quot;&lt;span&gt;I then changed the provider option in the software to Amazon&lt;/span&gt;&amp;quot;&lt;/p&gt;
&lt;p&gt;That sounds like you&amp;#39;re using &amp;quot;delegated authentication&amp;quot; where the site decides to trust you, _provided_ another (usually major) firm trusts you (trust isn&amp;#39;t the correct word here, but it will do). You often have a choice of provider (not always, it is dependent on the site). By you selecting Amazon and logging in with them, then the original site you were using will trust you (because they can confirm directly with Amazon that Amazon was OK with you logging in with your Amazon account, presumably).&lt;/p&gt;
&lt;p&gt;Two factor authentication doesn&amp;#39;t specify an algorithm, so it can differ, so usually specific software (or from a specific set) would need to be used.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Long story short, it&amp;#39;s just a set of steps that help to make it less likely that someone who had stolen your credentials could impersonate you, because they would also have had to have stolen multiple credentials, or your mobile phone or whatever is being used for the other factor in 2FA.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;img src="https://community.element14.com/aggbug?PostID=25377&amp;AppID=67&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: GitHub and GIT: sign your commits with a certificate</title><link>https://community.element14.com/technologies/security/b/blog/posts/git-sign-your-commits-with-a-certificate</link><pubDate>Sun, 12 Dec 2021 20:26:32 GMT</pubDate><guid isPermaLink="false">93d5dcb4-84c2-446f-b2cb-99731719e767:f0133c3d-8bfa-446d-b780-c35a8b8cde8e</guid><dc:creator>Jan Cumps</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Heads-up: if you&amp;#39;re using GitLab, it works there too:&lt;/p&gt;
&lt;p&gt;&lt;img src="/resized-image/__size/1280x720/__key/commentfiles/f7d226abd59f475c9d224a79e3f0ec07-f0133c3d-8bfa-446d-b780-c35a8b8cde8e/pastedimage1639340770729v1.png" alt=" " /&gt;&lt;/p&gt;&lt;img src="https://community.element14.com/aggbug?PostID=22360&amp;AppID=67&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: GitHub and GIT: sign your commits with a certificate</title><link>https://community.element14.com/technologies/security/b/blog/posts/git-sign-your-commits-with-a-certificate</link><pubDate>Fri, 10 Dec 2021 14:51:36 GMT</pubDate><guid isPermaLink="false">93d5dcb4-84c2-446f-b2cb-99731719e767:f0133c3d-8bfa-446d-b780-c35a8b8cde8e</guid><dc:creator>Jan Cumps</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Here is an example that show how this can be used in a fully automated flow:&lt;/p&gt;
&lt;p&gt;I submitted a pull request for Microsoft Azure (&lt;a href="https://github.com/Azure/azure-iot-device-ecosystem/pull/729" rel="noopener noreferrer" target="_blank"&gt;link&lt;/a&gt;).&lt;br /&gt;They validate if I signed my commits, and also validate if I have signed the CLA (Contribution License Agreement)&lt;/p&gt;
&lt;p&gt;&lt;img src="/resized-image/__size/1280x720/__key/commentfiles/f7d226abd59f475c9d224a79e3f0ec07-f0133c3d-8bfa-446d-b780-c35a8b8cde8e/pastedimage1639147673325v1.png" alt=" " /&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;If I don&amp;#39;t do that, the pull request workflow will keep my pull request pending.&lt;/p&gt;&lt;img src="https://community.element14.com/aggbug?PostID=22360&amp;AppID=67&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: AIRprint biometric sensor can scan fingerprints from 2 meters away</title><link>https://community.element14.com/technologies/security/b/blog/posts/airprint-biometric-sensor-can-scan-fingerprints-from-2-meters-away</link><pubDate>Wed, 08 May 2013 04:24:30 GMT</pubDate><guid isPermaLink="false">93d5dcb4-84c2-446f-b2cb-99731719e767:2a38be96-4fb1-4155-820e-c36286429650</guid><dc:creator>Former Member</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Const. Wendy Drummond, spokesperson for the 2010 G8-G20 Integrated Security Unit, told CTV News that some key intersections will have more than one of the temporary cameras. In addition, more &lt;a class="jive-link-external-small" href="http://www.saferguard.com/indoor-cameras/board-surveillance-cameras.html" rel="nofollow ugc noopener" target="_blank"&gt;Board Cameras&lt;/a&gt; might yet be used on a rapid-deployment basis once the summit is underway, she said. Others will be inside the inner security zone and won’t be visible to the general public.&lt;/p&gt;&lt;img src="https://community.element14.com/aggbug?PostID=12208&amp;AppID=67&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item></channel></rss>