[rescue] list dictatorship (topic change)

[R. Lonstein]

On Tue, Feb 26, 2002 at 12:56:34AM -0700, Gary Nichols wrote:
> God help you if you ever need to go to two-factor
> authentication.

Been there, done that. Inflicted it on ~150 ordinary users in need of
remote access. Support was a nightmare, but even after I left that team
they persisted and it became de facto standard. 

> Developer: "What's this here Sek-YUR-EYE-DEE card for?"
    [snip]
> (no offense to developers - just to the developers that
> don't understand why security/privacy issues are
> IMPORTANT)

It's not limited to developers (I am one these days, btw). Some yahoos
claiming to be SAs because they have scads of hardware running NT are
working with VPNs over the public internet but only using the single
shared secret for authentication. *BLINK*

- Ross