3 more workdays to go and only 2 braincells left.

[gina@fosstodon.org]

3 more workdays to go and only 2 braincells left.

[gina@fosstodon.org]

Welp, my one braincell forgot my email password that I use 20x a day, which is now blocked, so at least the other braincell will have a quiet start of the day ☕️

[tsvenson@fosstodon.org]

@Gina

Aren't you using a password manager?

[gina@fosstodon.org]

@tsvenson for one password? Nah.

[tsvenson@fosstodon.org]

@Gina

You only have one password in total?

[fedops@fosstodon.org]

@tsvenson @Gina password: yes. Account? No.

😂😂

[tsvenson@fosstodon.org]

@fedops @Gina

🥶

[gina@fosstodon.org]

@tsvenson @fedops technically, yes. Everything is connected through sso and 2fa.

[lalalasombra@chaos.social]

@Gina You need holidays and coffee

[gina@fosstodon.org]

@lalalasombra 3 more days 😭

[fedops@fosstodon.org]

@Gina which really is just the fancy talk version of "one password to compromise all accounts".
@tsvenson

[jannem@fosstodon.org]

@Gina
Same. Next week we're off to Buenos Aires.

[tsvenson@fosstodon.org]

@fedops @Gina

In particular if only password. That is no MFA to make it more secure.

[fedops@fosstodon.org]

@tsvenson @Gina I've not yet seen an SSO solution that needs MFA for every single system. Usually you get a token once which is good for several days or weeks.

And, as we've all learned by now (hopefully), token is just fancy speak for "clear text password".

[giantspacesquid@fosstodon.org]

@Gina so you’re saying you’re 1-fault tolerant on brain cells 🦧

[waynedixon@mastodon.social]

@Gina wait, how did you have two brain cells left with 3 days to go?

[gina@fosstodon.org]

@waynedixon it's been a long year.

[tsvenson@fosstodon.org]

@fedops

Today I used my work Mac, as I do most times when I have to be at the office. It is prepped with Microsoft Intune, and we use Microsoft's SSO, and I was on the intranet.

After logging in to desktop I had to log in through the SSO with both password and MFA on the mobile three, yes 3, times within a minute.

First to Teams, then to Edge and lastly to Outlook web version in Edge.

And no, it wasn't a cold boot.

Effing crazy eh!

@Gina

[gina@fosstodon.org]

@tsvenson @fedops uuuugh Ms Authenticator 🤮

[tsvenson@fosstodon.org]

@Gina @fedops

Yeah, and those in charge of managing it at work doesn't see any issues with the scenario I just described. And that was just the first minute for me.