http://cubist.cs.washington.edu/Security/2008/01/13/obtaining-hfs-master-keys/ Wed, 20 Aug 2008 16:44:43 +0000 http://wordpress.org/?v=2.5.1 http://cubist.cs.washington.edu/Security/2008/01/13/obtaining-hfs-master-keys/#comment-28 joyleung Mon, 14 Jan 2008 07:17:35 +0000 http://cubist.cs.washington.edu/Security/2008/01/13/obtaining-hfs-master-keys/#comment-28 This review gives interesting insight into how the Master Key system works at the dorms and the possible problems with it. As a previous resident on campus, it was good to be aware of these issues. I’d like to add a possible solution that might help. To hinder adversaries from posing as RAs, it would be possible to check in and keep track of who has the keys electronically with the Husky card. This could be implemented in a similar fashion to the library checkouts that can be done with the Husky card. Some added benefits to this idea is that there is only one active Husky card for a person at a time and since it is electronic, checkout can be quick and an electronic record can be easily kept. Of course, the solution is not perfect. The Husky card can be stolen and the electronic record can be meddled with. However, moving the Master Keys system to electronic would be a simple way to improve the security of the keys. This review gives interesting insight into how the Master Key system works at the dorms and the possible problems with it. As a previous resident on campus, it was good to be aware of these issues. I’d like to add a possible solution that might help. To hinder adversaries from posing as RAs, it would be possible to check in and keep track of who has the keys electronically with the Husky card. This could be implemented in a similar fashion to the library checkouts that can be done with the Husky card. Some added benefits to this idea is that there is only one active Husky card for a person at a time and since it is electronic, checkout can be quick and an electronic record can be easily kept. Of course, the solution is not perfect. The Husky card can be stolen and the electronic record can be meddled with. However, moving the Master Keys system to electronic would be a simple way to improve the security of the keys.

]]>