Identification of Security Risks: Identify all potential security risks that could occur as a part of The Great MFA Project and ensure we have sufficient protections against those risks

ossf / great-mfa-project

The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute hardware MFA tokens to critical open source software (OSS) projects.

Other

53 stars 14 forks source link

Identification of Security Risks: Identify all potential security risks that could occur as a part of The Great MFA Project and ensure we have sufficient protections against those risks #7

Open jenniferfernick opened 3 years ago

jnaulty commented 2 years ago

Non-Exhaustive Enumeration of Threats

hardware token intercepted during delivery and replaced with compromised hardware token
coupon code intercepted/stolen and used before the desired recipient can use it
personal identifiable information exposed (e.g., delivery address for hardware token)

david-a-wheeler commented 2 years ago

This will be fixed by #48.