How do RSA SecurID tokens work? Signify CEO, Dave Abraham explains

[arunkjoshi]

Interesting...nice explanation.

[jekader]

Thanks, it was very interesting to know how this thing really works.

What about the anti-replay? Does the last login time get recorded by the server so that records from "ten minutes ago" don't get entered again?

[skcin7]

How does the Signify keychain device connect to the authentication server? How does the Seed Record get input into the algorithm? Where is the Seed Record stored?

[crazygreg09]

Correct me if I'm wrong, but if the code is generated just by time of day wont the code be the same code at the same time every day? or am I missing something?

[skcin7]

@crazygreg09 No because it takes into account the day/year as well so it would never be the same.

[matejko4]

@crazygreg09 time will be the same but the date is not.

[like50somalians]

I found an RSA SecurID SID800 on the ground today...what should i do with it?

[bfcb]

Should we expect an explanation on how it got hacked?

[rawnnie]

@bfcb That'd be pretty interesting to know!

[iwantanoctopus]

I agree - well explained.

[Turkeymatron9000]

Great explanation!