From: Mary Lindstrom <mwernett**At_Symbol_Here**MIT.EDU>
Subject: Re: [DCHAS-L] Two-factor login in the lab
Date: Thu, 9 Feb 2017 17:29:49 +0000
Reply-To: ACS Division of Chemical Health and Safety <DCHAS-L**At_Symbol_Here**PRINCETON.EDU>
Message-ID: 2875F65F-8446-4972-9AB6-63462238B6C9**At_Symbol_Here**mit.edu
In-Reply-To


Hi Jillian,
MIT has two-factor authentication and offers users a small USB device called a YubiKey as an alternative to use of phones. This could be an option in labs for use with the gloves-on computers if it's compatible with the system in use at the university/company in question. 


Best,
Mary

________________________________________
Mary Lindstrom
EHS Coordinator
Massachusetts Institute of Technology
Biological Engineering and 
Department of Materials Science and Engineering
56-651
617-324-8161

On Feb 9, 2017, at 12:21 PM, Jyllian Kemsley <jyllian.kemsley**At_Symbol_Here**GMAIL.COM> wrote:

But if you're logging in to a computer that requires gloves, what do you do? Do you glove one hand for typing while holding the key-generating device in your other ungloved hand?

Personally, I'd hate to have to routinely type in my password with one hand. Lots of barriers to compliance here, no?

On Thu, Feb 9, 2017 at 9:09 AM, Wilhelm, Monique <mwilhelm**At_Symbol_Here**umflint.edu> wrote:

Hi Jyllian,

 

I am in academic labs.  We use  two-factor authentication on my campus for a lot of our systems, including our SDSs.  I do not see how it would be a problem in the lab when using an ELN.  Once you login with the code, say at the start of your work in the lab, you login to your ELN and won't need the phone any more.  So, the phone would be used and put away prior to hands becoming contaminated. 

 

Best,

Monique Wilhelm

Laboratory Manager

Department of Chemistry & Biochemistry

University of Michigan - Flint

 

From: ACS Division of Chemical Health and Safety [mailto:DCHAS-L**At_Symbol_Here**PRINCETON.EDU] On Behalf Of Jyllian Kemsley
Sent: Thursday, February 09, 2017 11:56 AM
To: DCHAS-L**At_Symbol_Here**PRINCETON.EDU
Subject: [DCHAS-L] Two-factor login in the lab

 

Hi all,

 

I received this question on Twitter yesterday. For those who perhaps aren't familiar with two-factor login, it's when you log into an account using your password and an additional code that you receive via text message, an app, or a key fob. Codes often reset after 30 seconds.

 

"any suggestions on dealing w/upcoming required 2factor login to our ELN (which we use from gloves-on lab computers)?"

 

Is anyone already dealing with this in their labs? If so, how are you advising people? If not, what are your thoughts, assuming that you will have to deal with this issue eventually?

 

I'll probably do a blog post on this, so assume that responses are on the record. Feel free to give me a call if you prefer, or let me know when would be a good time to call you.

 

Thanks!

Jyllian

 

Jyllian Kemsley, Ph.D.

Senior Editor, West Coast

Chemical & Engineering News

Phone:  (+1) 925-519-6681 (office, mobile, messaging apps)

Skype: jyllian.kemsley

Twitter: **At_Symbol_Here**jkemsley

 

--- This e-mail is from DCHAS-L, the e-mail list of the ACS Division of Chemical Health and Safety. For more information about the list, contact the Divisional secretary at secretary**At_Symbol_Here**dchas.org

--- This e-mail is from DCHAS-L, the e-mail list of the ACS Division of Chemical Health and Safety. For more information about the list, contact the Divisional secretary at secretary**At_Symbol_Here**dchas.org

--- This e-mail is from DCHAS-L, the e-mail list of the ACS Division of Chemical Health and Safety. For more information about the list, contact the Divisional secretary at secretary**At_Symbol_Here**dchas.org

Previous post   |  Top of Page   |   Next post



The content of this page reflects the personal opinion(s) of the author(s) only, not the American Chemical Society, ILPI, Safety Emporium, or any other party. Use of any information on this page is at the reader's own risk. Unauthorized reproduction of these materials is prohibited. Send questions/comments about the archive to secretary@dchas.org.
The maintenance and hosting of the DCHAS-L archive is provided through the generous support of Safety Emporium.