Posted by:
admin
15 years, 11 months ago
Gotta love open source. To paraphrase, if the project you are looking for doesn't exist, just wait (or start it yourself). I've been wanting to do a proof-of-concept on adding two-factor authentication to Google Apps for you Domain for a long time. And while we will probably put this functionality into the WiKID server down the road, I wanted something right now :).
Today, we released a WiKID plugin for the GHeimdall (silent G) project. GHeimdall is a TurboGears project for Google Apps SSO service that allows you to use your own authentication service to log into Google Apps for your Domain. There are sample plugins that made it quite easy to create a WiKID plugin using our Python code.
Applications in the cloud like Google's Apps face serious security threats from keystroke loggers and potential Man-in-the-middle attacks. While these threats won't stop most personal users, it can be an issue for corporate users or people that care about security. Eventually, the threats might seriously impede market growth. One friend of mine had his Yahoo mail credentials stolen. He had no option but to get a new account (this time on GMail) and he lost all this emails and contact information as it was his only account and he used it for business. What did the attackers gain? A valid account from which they could send spam. And they probably sent spam to all his contacts.
You can upgrade your Google Apps account to the Premier Edition for 30 days. You can also download and test the WiKID two-factor authentication server for 30 days or use the open source community edition.
The WiKID-GHeimdall plugin is pretty basic and it works, but should be considered "experimental". There is a how-to in the package. Thanks to Takashi Matsuo for his help and for developing GHeimdall.
Share on Twitter Share on FacebookRecent Posts
- Blast-RADIUS attack
- The latest WiKID version includes an SBOM
- WiKID 6 is released!
- Log4j CVE-2021-44228
- Questions about 2FA for AD admins
Archive
2024
2022
- December (1)
2021
2019
2018
2017
2016
2015
2014
- December (2)
- November (3)
- October (3)
- September (5)
- August (4)
- July (5)
- June (5)
- May (2)
- April (2)
- March (2)
- February (3)
- January (1)
2013
2012
- December (1)
- November (1)
- October (5)
- September (1)
- August (1)
- June (2)
- May (2)
- April (1)
- March (2)
- February (3)
- January (1)
2011
2010
- December (2)
- November (3)
- October (3)
- September (4)
- August (1)
- July (1)
- June (3)
- May (3)
- April (1)
- March (1)
- February (6)
- January (3)
2009
- December (4)
- November (1)
- October (3)
- September (3)
- August (2)
- July (5)
- June (6)
- May (8)
- April (7)
- March (6)
- February (4)
- January (427)
2008
- December (1)
Categories
- PCI-DSS (2)
- Two-factor authentication (3)
Tags
- wireless-cellular-mobile-devices (7)
- Two-factor authentication (10)
- Wireless, cellular, mobile devices (6)
- NPS (1)
- Phishing and Fraud (111)
- Active Directory (1)
- pam-radius (3)
- privileged access (2)
- Cloud Security (10)
- Mutual Authentication (60)
- Web Application Authentication (1)
- Authentication Attacks (99)
- pci (50)
- Security and Economics (97)
- WiKID (133)
- pam (2)
- VPN (1)
- Installation (2)
- RADIUS Server (1)
- Open Source (64)
- Tutorial (2)
- Strong Authentication (35)
- Information Security (137)
- Transaction Authentication (13)
- Miscellaneous (100)
- Linux (2)
- transaction-authentication (6)
- Two Factor Authentication (254)