Top all-time · #1895
Cisco Duo
Company blog · duosecurity.com/blogsecurityprogramming
Cisco Duo is the company blog at duosecurity.com, writing about security and programming. Since 2010, 40 different Hacker News readers have linked it 59 times, most often “Two-factor Authentication Made Easy: Phone Call, SMS, Mobile App, Token”. It is still writing: the last post was on 2026-10-14, and you can follow it by feed.
Rarely recommended · 0 of 38 sampled comments recommend it?
Why HN links it
HN readers link Duo's site for its two-factor authentication docs and product pages, such as the duounix SSH/PAM guide, RADIUS docs and Duo Web. Comments mostly praise the product rather than the writing.
Summarised by Claude from a sample of 38 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Cisco Duo secures workforce access and defends against advanced identity threats with IAM, phishing-resistant MFA, SSO, passwordless, and device trust.
Most-linked posts?
- Two-factor Authentication Made Easy: Phone Call, SMS, Mobile App, Token8 people · 9 mentions · first linked 2011-04-14
- /4 people · 4 mentions · first linked 2013-02-17
- /docs/duounix4 people · 4 mentions · first linked 2012-12-10
- /3 people · 4 mentions · first linked 2011-01-08
- /docs/duoweb2 people · 2 mentions · first linked 2013-05-28
- Analysis of the Gawker Password Dump2 people · 2 mentions · first linked 2010-12-13
- Duo Security API Edition2 people · 2 mentions · first linked 2014-01-05
What Hacker News says?
One of the original developers behind OpenSSH (Dug Song) started a competitor to RSA called Duo Security just a few years ago. They sell Gemalto IDProve 100 tokens and support Yubikey, but advise using their patent pending push based 2FA authentication because: "Login requests are signed with an asymmetric PKCS#1 v1.5 key pair, which provides a stronger identity assertion than passcodes and prevents “RSA-style” brea…
Comment linking /duo-push
on “Secret contract tied NSA and security industry pioneer”Submitted Bypass PayPal's Two-Factor Authentication as a story · 112 points
HN discussionLots of options. * You can buy a hardware token. https://www.duosecurity.com/product/methods/hardware-tokens * You can have Duo call/text you every time you want to log in. * You can use some other device you have that runs a mobile OS. I had Duo set up on my wifi-only iPad while I was using a feature phone for a few months a year ago. (I eventually gave up on that and got a smartphone, though.) * You can buy a used…
Comment linking /product/methods/hardware-tokens
on “Slack was hacked”Submitted Top 250 cracked Gawker passwords as a story · 43 points
HN discussionHere's a few more to add to your list (not all SaaS)... --ANALYTICS Snowplow ( https://github.com/snowplow/snowplow ) Segment.io ( http://segment.io ) --CRM Close.io ( http://close.io ), Streak ( http://www.streak.com/ ) Base ( http://getbase.com ) --SALES ElasticSales ( https://elasticsales.com/ ) --CUSTOMER SERVICE Metaverse Mod Squad ( http://metaversemodsquad.com/ ) --DATA Factual ( http://www.factual.com/ ) --D…
Comment linking /
on “Ask HN: Tools of the trade, 2013 edition”Submitted Duo Push is user-friendly two-factor authentication as a story · 9 points
HN discussionDuo Security[0] is awesome. [0] https://www.duosecurity.com/
Comment linking /
on “NSA infiltrated RSA security more deeply than thought: Study”Submitted Analysis of the Gawker Password Dump as a story · 6 points
HN discussionI'm not affiliated with Dashlane in any manner but I thought I'd chime in with my experience as a user. I used to use LastPass but lost a bit of confidence in them when they asked users to reset their master password [1] when an anomaly was found present in network traffic from one of their DBs. Prior to this I was looking at open source alternatives but the syncing and add-ons for each browser (which made logging i…
Comment linking /blog/breaking-down-the-probable-lastpass-breach
on “LogMeIn acquires Lastpass”Submitted The BACKRONYM MySQL Vulnerability as a story · 2 points
HN discussionhttp://www.duosecurity.com/ https://github.com/duosecurity/duo_unix
Comment linking /
on “Hacked Gmail Account”Submitted Two-factor Authentication Made Easy: Phone Call, SMS, Mobile App, Token as a story · 2 points
HN discussionI'm a security professional focusing on exactly this issue and you are exactly correct. It is, notably , not enough to safeguard the JS code with HTTPS/TLS (which, if you do that, SRP is of virtually no utility anyways). To protect the Javascript runtime, you'd also need to ensure that no element of the page was ever cached from a non-HTTPS connection, that no element of the page is currently fed from a non-HTTPS co…
Comment linking /
on “The Definitive Guide To Website Authentication”Submitted Duo Security plans to be everything you need for security as a story · 1 points
HN discussionAnd for all things not Google, check out http://www.duosecurity.com/ . Completely painless to set up on my box at home.
Comment linking /
on “The only way to get hold of a human at Google”Submitted Duo Security API Edition as a story · 1 points
HN discussionSenior Windows Software Engineer | Duo Security | Ann Arbor, Michigan (Relocation strongly preferred) ( https://www.duosecurity.com/company/jobs ) Duo Security's hosted two-factor authentication service brings strong, scalable security to organizations of any size. Duo's unique, high-availability architecture provides centralized management, self-service enrollment, and interactive secondary login through an intuiti…
Comment linking /company/jobs
on “Ask HN: Who is hiring? (February 2014)”Submitted Probing Mobile Operator Networks as a story · 1 points
HN discussion>is there an good alternative to SecureID? Twitter, Tumblr, Facebook, MIT, Stanford, Sony, Arbor Networks, 37 Signals, Twilio, (and many more) all use Duo Security as an alternative to RSA SecureID. https://www.duosecurity.com/success-stories Duo 2FA is easily the most secure[1], easiest to use[2], and most developer friendly multi-factor solution[3]. [1] https://www.duosecurity.com/security [2] https://www.duosecur…
Comment linking /api
on “Why we have to boycott RSA”Submitted Duo Security Researchers Uncover Bypass of PayPal’s Two-Factor Authentication as a story · 1 points
HN discussionDuo-unix from Duo security [1] works with scp as long as you install duo-push on your cell phone. [1] http://www.duosecurity.com/
Comment linking /
on “Entire cities dead on some World of Warcraft realms”Submitted BYOD Risks Obviated by Two-Factor Authentication as a story · 1 points
HN discussionIf you are looking for a clean reliable two-factor auth system, I highly recommend Duo: http://www.duosecurity.com/ I've been using them across a half dozen personal machines for quite a while now, looking to roll it out at work as well.
Comment linking /
on “Add two-factor authentication to your ssh in 30 seconds”Submitted Don't Trust SSL as a story · 1 points
HN discussionI can't speak for Google Authenticator but Duo works great with RADIUS http://www.duosecurity.com/docs/radius
Comment linking /docs/radius
on “Add two-factor authentication to your ssh in 30 seconds”Submitted Heartbleed Defense-in-Depth Part #1: Preventing Admin Session Hijacking as a story · 1 points
HN discussionhttps://www.duosecurity.com/authentication-methods What? This exists...
Comment linking /authentication-methods
on “Twitter’s New Two-Factor Solution Kicks SMS to the Curb”Submitted Duo Tech Talk withDon Bailey My Pet Fish Drove Downtown (an IoT Security Vid) as a story · 1 points
HN discussionI was wondering when Github was going to start supporting HSTS and 2-Factor Auth. I'm betting that it gets bumped in priority after this event. Nothing like an incident to move along security requirements! http://dev.chromium.org/sts https://www.duosecurity.com/features
Comment linking /features
on “Github SSL replaced by self-signed certificate in China”Shameless plug for http://duosecurity.com We offer a two-factor cloud service to protect any kind of service that may be remotely accessed: web, ssh, rdp, vpn, ... Biggest difference from Google Authenticator is the smart phone user experience: one tap to approve a login instead of transcribing a six digit OTP.
Comment linking /
on “Make Your Email Hacker Proof”
