NIS2 directive introduces new "Cybersecurity risk-management measures" where it states:
"(j) the use of multi-factor authentication or continuous authentication solutions, secured voice, video and text communications and secured emergency communication systems within the entity, where appropriate."
What is your "secured emergency communication system within the entity" ?
Noted down how LUKS can be supported by FIDO2 token.
OOB-Comm is now implemented for reTerminal, Pinephone and RPi400.
Small video of my Out-Of-Band comms running on Pinephone.
Been working with my firmware image for Pinephone. Aim is to have out-of-band communication capability in denied networks or areas.
So no distribution, just plain booting Linux 'firmware' with QT/QML user interface. Payloads currently supported: voice and messages.
Continuing experimenting with my FIDO2 key and just found out that ssh keys can be generated with and in FIDO2 usb token.
Found these two post regarding this issue and they work good. Generating SSH key with my FIDO2 Nitrokey allows me to take key with me to my laptop and issue command:
ssh-add -K
And my SSH key is usable for that session. No more key copying and storing on disk.
Setting up fido2 token to open luks encrypted mount on Fedora 37 was surprisingly easy:
# Check luks details of your drive
cryptsetup luksDump /dev/sda3
# Enroll fido2
systemd-cryptenroll --fido2-device=auto \
--fido2-with-client-pin=true \
--fido2-with-user-presence=true /dev/sda3
# Modify /etc/crypttab
luks-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx UUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx - fido2-device=auto
# Regenerate initramfs
dracut --regenerate-all --force
After this my thinkpad asks fido2 + pin code to unlock luks partition. Source is from this post.
Been experimenting with Web UI with websocket connection to backend. All activity on this screencast is run on background shell script and data is exchanged via websocket connection to javascript in UI.
From Polar to Casio. From LTE to Iridium.
Been working with secure file transmission.
Managed to submit that paper. Bit too broad subject but let's see if any feedback surfaces.
Extract from personal photos, evening in middle east.
Financial Times article about breaking RSA 2048 with quantum computer. Research paper is here.
We had yesterday country wide outage of mobile & fixed network. Things get sorted out pretty quickly but this serves a good reminder - what if?
Most confusing part is that they don't yet know - what caused it.
Been working with paper about resilient platforms and out of band communication. Stay tuned.