[Macpartners] [WinPartners] MIT Personal Certificate Renewal Time

[Garry P Zacheiss]

Hi Nilam,

If you have staff member who don't have a dedicated MIT VoIP phone line and who don't want to use a personal mobile device, we can allocate a hardware token for their use.  Feel free to follow up with me privately regarding how many you need and I'd be happy to coordinate getting the tokens to you.

Best,
Garry

> On Jul 14, 2015, at 2:16 PM, Nilam L Kotadia <nilam at mit.edu> wrote:
> 
> How do you handle a situation where you have multiple people answering the same phone line at any given time? They do not have their own phone line.
> 
> Nilam L. Kotadia
> Sent from my iPhone
> 
>> On Jul 14, 2015, at 2:14 PM, Christos Papadopoulos <papadop at mit.edu> wrote:
>> 
>> The phone call from the Duo system is instantaneous from the moment you initiate the call from the browser. If you choose to have the call sent to your office phone, you won't even have a chance to stand up from your desk and walk away from your phone before it rings. Nobody walks away from an ATM after they initiate a withdrawal, and prior to physically receiving the money in their hand. If you aren't near the device that will be used to call you, don't start the process.
>> 
>> -Chris
>> 
>> -----Original Message-----
>> From: itpartners-bounces at mit.edu [mailto:itpartners-bounces at mit.edu] On Behalf Of Teddy Thomas
>> Sent: Tuesday, July 14, 2015 1:42 PM
>> To: Rich Pieri
>> Cc: ist-all at mit.edu; supstaff at mit.edu; itpartners at mit.edu; certificate-renewal at mit.edu; winpartners at mit.edu; ao-fo at mit.edu; macpartners at mit.edu
>> Subject: Re: [WinPartners] MIT Personal Certificate Renewal Time
>> 
>> You can use Duo without a smartphone; it can send SMS codes or regular phone calls. However, that still might be insecure. For example, if I walk away from my desk, and I have a malicious co-worker, they could potentially get the verification call on my desk phone.  Or, if I have mirroring of my texts turned on for my iOS devices, someone might be able to get the SMS code that way.
>> 
>> -Teddy
>> 
>>> On Jul 14, 2015, at 1:33 PM, Rich Pieri <ratinox at mit.edu> wrote:
>>> 
>>> On 7/14/15 1:26 PM, Patricia Sheppard wrote:
>>>> Faculty, staff and affiliates will be required to use Duo no later than
>>>> September 30, 2015, but we encourage you to register for it when you
>>>> renew your certificates. There will be a screen to sign up for Duo at
>>>> the end of the certificate acquisition process.
>>> 
>>> When will IS&T be issuing YubiKeys to those among us who don't have
>>> smart phones?
>>> 
>>> -- 
>>> Rich Pieri <ratinox at mit.edu>
>>> MIT Laboratory for Nuclear Science
>>> _______________________________________________
>>> winpartners mailing list
>>> winpartners at mit.edu
>>> http://mailman.mit.edu/mailman/listinfo/winpartners
>> 
>> <Chris Papadopoulos.vcf>