Ha! CharlesSent from a mobile; please excuse the brevity. -------- Original message --------From: Phil Smith III <li...@akphs.com> Date: 8/3/22 4:54 PM (GMT-08:00) To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Looking for old (fake) humorous IBM password memo There's this.Logon Process UpdateApril 1, 2022With the recent spate of supply-chain cyberattacks, the U.S. NationalInstitute of Standards and Technology (NIST) has issued new guidelines tosecure computer system access.Previous recommendations included use of randomized, computer-generatedpasswords at least eight characters long. The new guidance includes anupdate to that previous dictum that includes randomized, computer-generateduserids as well. Both userids and passwords must now be at least 20characters long.Similar to the features offered by LastPass and 1Password to managepasswords, a service is now available from Google: Google Logon. By default,this uses four-factor identification, described as "Something you know,something you do, something you have, something you are": a password, anaction, a physical device, and a biometric.The password will be the process users are familiar with, although theminimum length and generated aspect means many users will also choose to useLastPass, 1Password, or equivalent.The action component will use a phone-based application that displays arandomly selected word, which the user must then write. Setup of thiscomponent will comprise writing several hundred words on a screen or tablet.The physical component can utilize a physical token such as a YubiKey,SecurID, or mobile phone-based SMS or application authentication via OIDC.Finally, the biometric component will be implemented using repurposedTheranos Edison analysis machines and nanotainer blood sampling techniques.At the end-user's discretion, authentication can also just use a Facebooklogin.----------------------------------------------------------------------For IBM-MAIN subscribe / signoff / archive access instructions,send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
