mobile phone + password = 2 factor auth?

[Jesse Keating]

On Tue, 2009-05-26 at 17:44 +0200, Till Maas wrote:
> A problem with phones is, that they are typically not as secure as hardware 
> tokens. Users can install custom software on them. Also the phone may be 
> compromised via bluetooth. It might be even possible to directly access text 
> messages via bluetooth or maybe also wifi nowadays.
> 

Wouldn't that be why you have to combine what comes up on your phone
with the password you know, so that just the phone alone can't get you
in?

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20090526/9e1395a5/attachment.bin