Is there no way to show a script-generated welcome message on gdm/GNOME?
-
Is there no way to show a script-generated welcome message on gdm/GNOME?
I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.
When you are about to login you check the hash against a hash you created on your phone.
If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password.
-
R relay@relay.infosec.exchange shared this topic
-
Is there no way to show a script-generated welcome message on gdm/GNOME?
I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.
When you are about to login you check the hash against a hash you created on your phone.
If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password.
The creation of the hash should probably also include for example an "x", indicating that no USB-event has happend (no one has plugged in or out any USB-device).
-
Is there no way to show a script-generated welcome message on gdm/GNOME?
I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.
When you are about to login you check the hash against a hash you created on your phone.
If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password.
@spacebug why not just use a fido device to login?
-
@spacebug why not just use a fido device to login?
@fabiscafe
How do they work?
They don't leak any data if you plug them in a honeypot device and use them?