2677: Two Key System - Revision history

FaviFake: /* Transcript */

2025-04-28T14:46:46Z

‎Transcript

FaviFake: /* Explanation */

2025-04-28T14:46:34Z

‎Explanation

FaviFake: /* Explanation */

2025-04-28T14:46:17Z

‎Explanation

172.69.70.210: /* Introduced a singular issue in pursuit of lesser perfection */

2025-01-09T16:16:07Z

‎Introduced a singular issue in pursuit of lesser perfection

172.69.70.183: /* Fixed several errors, mistakes, and other issues in pursuit of greater perfection */

2025-01-09T16:15:09Z

‎Fixed several errors, mistakes, and other issues in pursuit of greater perfection

1234231587678 at 20:19, 27 February 2024

2024-02-27T20:19:45Z

Jkshapiro: /* Explanation */ typos

2023-08-08T00:12:30Z

‎Explanation: typos

Jkshapiro: /* Explanation */ Delete unncecessary added word

2023-08-08T00:10:38Z

‎Explanation: Delete unncecessary added word

Jkshapiro: /* Explanation */ Remove irrelevant mention of nuclear briefcase

2023-08-08T00:09:51Z

‎Explanation: Remove irrelevant mention of nuclear briefcase

Xurkitree10: /* Transcript */

2023-04-23T14:07:19Z

‎Transcript

@@ Line 43: / Line 43: @@
 :[The drawing now represents two keys, pointing to Cueball and Ponytail turning keys at either end of a large similarly anonymous cabinet, except for the picture upon it being of the device of panel 2]
 :Cueball: We've installed a two-key lock on the dual-turner device to prevent accidental use.
 {{comic discussion}}

@@ Line 16: / Line 16: @@
 And thus we find out that the thing used to make the safeguards less of a nuisance actually defeats the purpose of the safeguards. As with website passwords, where the use of a computer or device by someone else could allow ''them'' to use the autologin capabilities, or even to view all passwords used locally and take away for their own use, the whole point of the deliberately included security factor has been negated. It was only the perceived need for two independent operators that created the initial situation of requiring two separated keys, or indeed any keys at all!
-Hence, after a further cycle of development, in order to restore the security of the two-key system, the two-key turning device (rather than being removed or made unworkable) is provided for use but ''only'' if it can be removed from a secure cabinet (labelled as giving access to the 'key turner', much as the original unit was labelled as giving access to a missile) with the requirements to open it being… two separate keys to be used at the same time! This could be seen as the same as {{w|password manager}}s being introduced, either as a part of a browser or third-party add-ons, which automatically provide the user's passwords for any given access attempt but only when they are given a password (or other security factor) themselves.
+Hence, after a further cycle of development, in order to restore the security of the two-key system, the two-key turning device (rather than being removed or made unworkable) is provided for use but ''only'' if it can be removed from a secure cabinet (labelled as giving access to the 'key turner', much as the original unit was labelled as giving access to a missile) with the requirements to open it being… two separate keys to be used at the same time! This could be seen as the same as {{w|password manager}}s being introduced, either as a part of a browser or third-party add-ons, which automatically provide the user's passwords for any given access attempt but only when they are given a password (or other security factor) themselves. Rather than removing a 'problem', a new safeguard is added which does the exact same thing as the original, the possible nuisance (but hopefully also the necessary element of security) included.
 Password management, as a process, is substantially similar to key management: Common failure-modes for both passwords and keys, include forgetting your own long-term passwords (especially if you changed computers after asking your computer to remember your passwords for you) which is functionally similar to misplacing your keys, or tending to use just a single password or key for every lock (which, if ever compromised in one situation, may lead to being compromised across many others). A Password Manager can reduce such issues, as it can be capable of 'spitting out' or transfering login details at will and letting you use many different passwords (even generating and using the kinds of passwords nobody should be able to guess, [[936: Password Strength|or remember!]]) across your many different websites, etc. But this passkey storage must itself be secure, and so should be functionally accessible perhaps only through use of a 'master passkey' or some other kind of authentication process, which may be subject to the same issues of forgetting, copying, or theft. Similarly, a central lockbox full of keys (such as those used at some car dealerships), can make handling multiple keys much easier, while introducing a single point of failure in the event that lockbox is illicitly accessed. Various forms of {{w|multi-factor authentication}}, plus auxiliary authentication methods for password recovery/reset, go some way to alleviate these challenges, at the expense of further intermediary steps and hardware requirements; but the balance between ease of use and security is never quite so simple and universal.

@@ Line 10: / Line 10: @@
 ==Explanation==
-As an allegory, the comic relates the results of software development to the reputed safeguards of nuclear missile launch systems.
+As an allegory, the comic relates the results of software development to the reputed safeguards of nuclear missile launch systems. Such precautions include the {{w|Two-man rule|need for two independent operators for authorization}}, to prevent honest mistakes or the rogue actions of lone-actors. This is the kind of procedure used at a launch site where two duty officers each need to turn their respective keys simultaneously. The physical distance between the keys ensures that an individual cannot turn both keys simultaneously, or initiate the sequence without the second person.
 In relation to software development, the inconvenience caused by such precautions (like account passwords and {{w|two-factor authentication}}) has prompted the development of methods to make the process easier (like {{w|autofill|autofilling}} passwords or website cookies keeping a user logged in for multiple visits). Similarly, the system in the comic is made more convenient by using a dual key-turner that circumvents the need for two users to turn the keys.

@@ Line 27: / Line 27: @@
 The title text mentions a one-stop-shop for {{w|decentralization}}. The drive to make use of "one-stop-shops" (such as a website aggregating searches for the best insurance) and ''also'' to decentralize (in this case not relying upon any one vendor, even that single aggregator who might actually not be the best aggregator) is another self-contradiction — because a one-stop-shop is by definition centralized.
-The comic being posted on September 26th may or may not be a reference to Stanislav Petrov correctly rejecting the false detection of an incoming nuclear missile strike from the US on September 26th, 1983. [[2052: Stanislav Petrov Day]] When asked whether or not this reference was intentional, [[Randall]] has continuously declined to comment.
+The comic being posted on September 26th may or may not be a reference to Stanislav Petrov correctly rejecting the false detection of an incoming nuclear missile strike from the US on September 26th, 1983. When asked whether or not this reference was intentional, [[Randall]] has continuously declined to comment. [[2052: Stanislav Petrov Day]]
 For a related xkcd on security and software cycles, see [[2044: Sandboxing Cycle]].

@@ Line 14: / Line 14: @@
 Such precautions include the {{w|Two-man rule|need for two independent operators for authorization}}, to prevent honest mistakes or the rogue actions of lone-actors. This is the kind of procedure used at a launch site where two duty officers each need to turn their respective keys simultaneously. The physical distance between the keys ensures that an individual cannot turn both keys simultaneously, or initiate the sequence without the second person.
-In relation to software development, the inconvenience prevented by such precautions (like account passwords and {{w|two-factor authentication}}) has prompted the development of methods to make the process easier (like {{w|autofill|autofilling}} passwords or website cookies keeping a user logged in for multiple visits). Similarly, the system in the comic is made more convenient by using a dual key-turner that circumvents the need for two users to turn the keys.
+In relation to software development, the inconvenience caused by such precautions (like account passwords and {{w|two-factor authentication}}) has prompted the development of methods to make the process easier (like {{w|autofill|autofilling}} passwords or website cookies keeping a user logged in for multiple visits). Similarly, the system in the comic is made more convenient by using a dual key-turner that circumvents the need for two users to turn the keys.
 And thus we find out that the thing used to make the safeguards less of a nuisance actually defeats the purpose of the safeguards. As with website passwords, where the use of a computer or device by someone else could allow ''them'' to use the autologin capabilities, or even to view all passwords used locally and take away for their own use, the whole point of the deliberately included security factor has been negated. It was only the perceived need for two independent operators that created the initial situation of requiring two separated keys, or indeed any keys at all!
@@ Line 25: / Line 25: @@
 <!-- This could also be something of a reference to ‘two factor authentication’ a security annoyance which also requires ‘two keys’ (typically something from a dynamic physical token, as well as the static password which is susceptible to unauthorised reuse) that was adopted by more secure websites. -->
-The title text mentions a one-stop-shop for {{w|decentralization}}. The drive to make use of one-stop-shops (such as a website aggregating searches for the best insurance) and ''also'' to decentralize (in this case not relying upon any one vendor, even that single aggregator who might actually not be the best aggregator) is another self-contradiction — because a one-stop-shop is by definition centralized.
+The title text mentions a one-stop-shop for {{w|decentralization}}. The drive to make use of "one-stop-shops" (such as a website aggregating searches for the best insurance) and ''also'' to decentralize (in this case not relying upon any one vendor, even that single aggregator who might actually not be the best aggregator) is another self-contradiction — because a one-stop-shop is by definition centralized.
-The comic being posted on September 26th may be a reference to Stanislav Petrov correctly rejecting the false detection of an incoming nuclear missile strike from the US on September 26th, 1983. [[2052: Stanislav Petrov Day]]
+The comic being posted on September 26th may or may not be a reference to Stanislav Petrov correctly rejecting the false detection of an incoming nuclear missile strike from the US on September 26th, 1983. [[2052: Stanislav Petrov Day]] When asked whether or not this reference was intentional, [[Randall]] has continuously declined to comment.
 For a related xkcd on security and software cycles, see [[2044: Sandboxing Cycle]].

@@ Line 18: / Line 18: @@
 And thus we find out that the thing used to make the safeguards less of a nuisance actually defeats the purpose of the safeguards. As with website passwords, where the use of a computer or device by someone else could allow ''them'' to use the autologin capabilities, or even to view all passwords used locally and take away for their own use, the whole point of the deliberately included security factor has been negated. It was only the perceived need for two independent operators that created the initial situation of requiring two separated keys, or indeed any keys at all!
-Hence, after a further cycle of development, in order to restore the security of the two-key system, the two-key turning device (rather than being removed or made unworkable) is provided for use but ''only'' if it can be removed from a secure cabinet (labelled as giving access to the 'key turner', much as the original unit was labelled as giving access to a missile) with the requirements to open it being… …two seperate keys to be used at the same time! This could be seen as the same as {{w|password manager}}s being introduced, either as a part of a browser or third-party add-ons, which automatically provide the user's passwords for any given access attempt but only when they are given a password (or other security factor) themselves.
+Hence, after a further cycle of development, in order to restore the security of the two-key system, the two-key turning device (rather than being removed or made unworkable) is provided for use but ''only'' if it can be removed from a secure cabinet (labelled as giving access to the 'key turner', much as the original unit was labelled as giving access to a missile) with the requirements to open it being… …two separate keys to be used at the same time! This could be seen as the same as {{w|password manager}}s being introduced, either as a part of a browser or third-party add-ons, which automatically provide the user's passwords for any given access attempt but only when they are given a password (or other security factor) themselves.
 And so, rather than removing a 'problem', a new safeguard is added which does the exact same thing as the original, the possible nuisance (but hopefully also the necessary element of security) included.
-Password management, as a process, is substantially similar to key management: Common failure-modes for both passwords and keys, include forgetting your own long-term passwords (especially if you changed computers after asking your computer to remember your passwords for you) which is functionally similar to misplacing your keys, or tending to use just a single password or key for every lock (which, if ever compromised in one situation, may lead to being compromised across many others). A Password Manager can reduce such issues, as it can be capable of 'spitting out' or transfering login details at will and letting you use many different passwords (even generating and using the kinds of passwords nobody should be able to guess, [[936: Password Strength|or remember!]]) across your many different websites, etc. But this passkey storage must itself be secure, and so should be functionally accessible perhaps only through use of a 'master passkey' or some other kind of authentication process, which may be subject to the same issues of forgetting, copying, or theft. Similarly, a central lockbox full of keys (such as those used at some car dealerships), can make handling multiple keys much easier, while introducing a single point of failure in the event that lockbox is illicitly accessed. Various forms of {{w|multi-factor authentication}}, plus auxiallary authentication methods for password recovery/reset, go some way to alleviate these challenges, at the expense of further intermediary steps and hardware requirements; but the balance between ease of use and security is never quite so simple and universal.
+Password management, as a process, is substantially similar to key management: Common failure-modes for both passwords and keys, include forgetting your own long-term passwords (especially if you changed computers after asking your computer to remember your passwords for you) which is functionally similar to misplacing your keys, or tending to use just a single password or key for every lock (which, if ever compromised in one situation, may lead to being compromised across many others). A Password Manager can reduce such issues, as it can be capable of 'spitting out' or transfering login details at will and letting you use many different passwords (even generating and using the kinds of passwords nobody should be able to guess, [[936: Password Strength|or remember!]]) across your many different websites, etc. But this passkey storage must itself be secure, and so should be functionally accessible perhaps only through use of a 'master passkey' or some other kind of authentication process, which may be subject to the same issues of forgetting, copying, or theft. Similarly, a central lockbox full of keys (such as those used at some car dealerships), can make handling multiple keys much easier, while introducing a single point of failure in the event that lockbox is illicitly accessed. Various forms of {{w|multi-factor authentication}}, plus auxiliary authentication methods for password recovery/reset, go some way to alleviate these challenges, at the expense of further intermediary steps and hardware requirements; but the balance between ease of use and security is never quite so simple and universal.
 <!-- This could also be something of a reference to ‘two factor authentication’ a security annoyance which also requires ‘two keys’ (typically something from a dynamic physical token, as well as the static password which is susceptible to unauthorised reuse) that was adopted by more secure websites. -->

@@ Line 12: / Line 12: @@
 As an allegory, the comic relates the results of software development to the reputed safeguards of nuclear missile launch systems.
-Such precautions include the {{w|Two-man rule|need for two independent operators for authorization}}, to prevent honest mistakes or the rogue actions of lone-actors. This may include the use of a {{w|nuclear briefcase}}, where a verification process involves secondary authority figures other than the primary one.  However, this illustration more clearly refers to the kind of procedure used at a launch site where two duty officers each need to turn their respective keys simultaneously. The physical distance between the keys ensures that an individual cannot turn both keys similtaneously, or initiate the sequence without the second person.
+Such precautions include the {{w|Two-man rule|need for two independent operators for authorization}}, to prevent honest mistakes or the rogue actions of lone-actors. This is the kind of procedure used at a missile launch site where two duty officers each need to turn their respective keys simultaneously. The physical distance between the keys ensures that an individual cannot turn both keys simultaneously, or initiate the sequence without the second person.
 In relation to software development, the inconvenience prevented by such precautions (like account passwords and {{w|two-factor authentication}}) has prompted the development of methods to make the process easier (like {{w|autofill|autofilling}} passwords or website cookies keeping a user logged in for multiple visits). Similarly, the system in the comic is made more convenient by using a dual key-turner that circumvents the need for two users to turn the keys.

@@ Line 33: / Line 33: @@
 ==Transcript==
 :[Caption above the panel:]
 :All software development, eventually