[WinPartners] MIT Personal Certificate Renewal Time

[Christos Papadopoulos]

The phone call from the Duo system is instantaneous from the moment you initiate the call from the browser. If you choose to have the call sent to your office phone, you won't even have a chance to stand up from your desk and walk away from your phone before it rings. Nobody walks away from an ATM after they initiate a withdrawal, and prior to physically receiving the money in their hand. If you aren't near the device that will be used to call you, don't start the process.

-Chris

-----Original Message-----
From: itpartners-bounces at mit.edu [mailto:itpartners-bounces at mit.edu] On Behalf Of Teddy Thomas
Sent: Tuesday, July 14, 2015 1:42 PM
To: Rich Pieri
Cc: ist-all at mit.edu; supstaff at mit.edu; itpartners at mit.edu; certificate-renewal at mit.edu; winpartners at mit.edu; ao-fo at mit.edu; macpartners at mit.edu
Subject: Re: [WinPartners] MIT Personal Certificate Renewal Time

You can use Duo without a smartphone; it can send SMS codes or regular phone calls. However, that still might be insecure. For example, if I walk away from my desk, and I have a malicious co-worker, they could potentially get the verification call on my desk phone.  Or, if I have mirroring of my texts turned on for my iOS devices, someone might be able to get the SMS code that way.

-Teddy

> On Jul 14, 2015, at 1:33 PM, Rich Pieri <ratinox at mit.edu> wrote:
> 
> On 7/14/15 1:26 PM, Patricia Sheppard wrote:
>> Faculty, staff and affiliates will be required to use Duo no later than
>> September 30, 2015, but we encourage you to register for it when you
>> renew your certificates. There will be a screen to sign up for Duo at
>> the end of the certificate acquisition process.
> 
> When will IS&T be issuing YubiKeys to those among us who don't have
> smart phones?
> 
> -- 
> Rich Pieri <ratinox at mit.edu>
> MIT Laboratory for Nuclear Science
> _______________________________________________
> winpartners mailing list
> winpartners at mit.edu
> http://mailman.mit.edu/mailman/listinfo/winpartners