Hardware Key Backup Strategy for Account Recovery — Tested by Nolan Voss By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer Hardware key backup strategy for compliance-driven organizations requires a minimum of three keys per critical account with geographically distributed storage in…

Multi-Device 2FA Sync Privacy Concerns — Tested by Nolan Voss By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer Multi-device 2FA sync protocols introduce significant entropy into the authentication chain, often creating a single point of failure where a compromised device can…

Push Notification 2FA Vulnerabilities — Tested by Nolan Voss By Nolan Voss — 12yr enterprise IT security, 4yr penetration tester, independent security consultant — Austin, TX home lab The Short Answer Push notification-based 2FA is a convenience feature that introduces significant man-in-the-middle risks, particularly when the push payload lacks cryptographic binding to the specific application…

OnlyKey 3.0 Hardening in Austin: What My Proxmox Lab Revealed About Offline TOTP and Hardware Failures The OnlyKey 3.0 is a niche hardware token that functions as a USB smart card reader, requiring a host computer to execute cryptographic operations for TOTP generation and SSH key storage. In my Proxmox cluster in Austin, Texas, I…