Hi @darshans2021 no this PBA is not network enabled. In fact one of the changes I made when I forked, was explicitly disabling network support while booted into the PBA environment.

Personally, I wanted a standalone PBA, which makes more sense for an individual looking to protect their personal computer from others. While network enabled PBAs make more sense in an enterprise setting, where the IT department might want to provide remote assistance, or for servers located in a data center, which might need to be unlocked remotely after a power loss.

What I found, at least when I looked 2 years ago, was the various commercial implementations catered to the latter use cases. For an individual, who doesn't need network support, these features are a liability.

That said, I would welcome a pull request which adds remote unlock support via the network, if implemented properly. And one of the requirements would be generating distinct PBA images, which include network support, and images which don't. That would allow uses to install the image appropriate for their needs.

There is a fork floating around where someone added remote access support, but it tied to having a specific network topology and couldn't be disabled. I think there were other issues, like the ability to silently submit passwords remotely, without warning/logging invalid attempts to a console. There is also the issue of making extra sure someone who does login remotely, can't crash the authenticator, or escape out of it, and then subsequently intercept keystrokes supplied via the console (presumably by the legitimate owner).

Supports network authentication? #24

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions