Rotary dial authenticates sudo commands
Thursday, February 3, 2011
[W1ndman] won’t win any security awards for this build, but it’s an  interesting idea. On many Linux-based systems commands can be run with  administrator privileges by prefacing them with the keyword ‘sudo’.  Normally you’d be asked for a password but [W1ndman] used the Pluggable  Authentication Modules (PAM) to authenticate via his own shell script.  That script checks a code from this rotary dial for authentication.  An Arduino takes care of listening for each digit that is entered and  then sends the code via USB for comparison with a stored file. We’re not  sure if that stored code is in a plain file or is otherwise protected,  but at the very least this prevents you from using ‘sudo’ willy-nilly.
 
0 komentar:
Post a Comment