All Mine!
summary
Presents an implementation called “offline OTP” that pushes one-time-password lists to clients and verifies them locally via PAM with a SQLite backend, includes certificate management and SSH key connectors, and integrates YubiKey Challenge‑Response into LUKS boot. Describes the REST/Flask tools used, the codebase size (~13k LOC), and rollout workflows (PIN delivery, statistics) useful for people needing implementation details, APIs, hardware and operational procedures.
AI-written summary · about
chapters (27)
- 0:00Introduction
- 1:52Control as central concern
- 3:17Current state of control in IT
- 4:24Two-factor authentication explained
- 6:55Loss of control in modern IT
- 7:40Proprietary software key problems
- 10:11Open and lean software desire
- 11:21Demo: Software agility with egg
- 13:07Securing access with Privacy Idea
- 16:21Possession vs biometrics
- 21:00Hard vs soft possession factors
- 24:11Demo: Raw vs cooked software
- 27:46Privacy Idea open-source solution
- 30:57Hosted 2FA critically examined
- 34:10Hardware tokens for Privacy Idea
- 35:55Privacy Idea technical architecture
- 37:22Fast release cycles scalability
- 38:28LUKS boot with 2FA
- 41:41Offline OTP for logins
- 46:21Certificates SSH keys in Privacy Idea
- 47:48Write access to user sources
- 50:17Smallest install with SQLite
- 50:38PIN dealer for token distribution
- 51:42Statistics and error analysis
- 53:06Summary: Why Privacy Idea?
- 54:31Control over own data and keys
- 55:14Outlook and workshop
related talks
01h 06mTutorial: Passkeys to the People: Building a Modern MFA Application with Open Source...
47mPasswordless Web
50msshlogin: securely authenticating to remote Linux systems via ...
30mKnock, knock! Who's there?
47mThe state of passwordless auth on the web
29mTackling Authentication with Phoenix
21mGoing Passwordless
33mLightning Talks I