what's the deal with two factor authentication[laugh track]
-
what's the deal with two factor authentication
[laugh track]i come back to work after a weekend and it's like girl what are you doing here
[laugh track]for every fucking thing.
[laugh track]i'm amazed that the two factor app doesn't require two additional two factor things to unlock
[laugh track]should have called it twenty factor
[laugh track]you there, info cop. in the back. I see you taking notes. don't get any fucking ideas
[laugh track]@aeva that sounds like the kind of imaginary audience i would want to write jokes for
-
@aeva that sounds like the kind of imaginary audience i would want to write jokes for
@lritter they're a great audience 😌
-
undefined oblomov@sociale.network shared this topic
-
what's the deal with two factor authentication
[laugh track]i come back to work after a weekend and it's like girl what are you doing here
[laugh track]for every fucking thing.
[laugh track]i'm amazed that the two factor app doesn't require two additional two factor things to unlock
[laugh track]should have called it twenty factor
[laugh track]you there, info cop. in the back. I see you taking notes. don't get any fucking ideas
[laugh track]@aeva The original two-factor authentication was a ruse to force you to give up your phone number.
-
@aeva The original two-factor authentication was a ruse to force you to give up your phone number.
@khleedril I believe it
-
what's the deal with two factor authentication
[laugh track]i come back to work after a weekend and it's like girl what are you doing here
[laugh track]for every fucking thing.
[laugh track]i'm amazed that the two factor app doesn't require two additional two factor things to unlock
[laugh track]should have called it twenty factor
[laugh track]you there, info cop. in the back. I see you taking notes. don't get any fucking ideas
[laugh track]@aeva I have no idea what they implemented or how, but I am very sure that my password never works twice on my health insurance's site; either I click on "i forgot my password" and get a new one or it won't go in at all
-
what's the deal with two factor authentication
[laugh track]i come back to work after a weekend and it's like girl what are you doing here
[laugh track]for every fucking thing.
[laugh track]i'm amazed that the two factor app doesn't require two additional two factor things to unlock
[laugh track]should have called it twenty factor
[laugh track]you there, info cop. in the back. I see you taking notes. don't get any fucking ideas
[laugh track]@aeva the "two factor" app we use does in fact require two other factors to unlock
-
@aeva the "two factor" app we use does in fact require two other factors to unlock
@aeva specifically, one of the factors has to be that app now, but of course you can't use the app itself to authenticate yourself to the app, so you need an extra factor to bootstrap the process, and every time you're on a new machine (or one you haven't used in a while, or VS wants to re-activate) it's a game of operation where you have to do a very precise sequence of steps to unlock the unlock app then do the actual log in before it times out
-
@aeva the "two factor" app we use does in fact require two other factors to unlock
-
@aeva specifically, one of the factors has to be that app now, but of course you can't use the app itself to authenticate yourself to the app, so you need an extra factor to bootstrap the process, and every time you're on a new machine (or one you haven't used in a while, or VS wants to re-activate) it's a game of operation where you have to do a very precise sequence of steps to unlock the unlock app then do the actual log in before it times out
@aeva anyway the "blessed" way to login involves that magic app, TOTP, a regular password that expires after a "round" number of months (which sucks, you want a few extra days of slack there, because every once in a while the time from "your password is about to expire" to "your password is expired" falls entirely into a long weekend or vacation or whatever), and having memorized which identical-looking login screens want your email address and which want just the user name
-
@aeva anyway the "blessed" way to login involves that magic app, TOTP, a regular password that expires after a "round" number of months (which sucks, you want a few extra days of slack there, because every once in a while the time from "your password is about to expire" to "your password is expired" falls entirely into a long weekend or vacation or whatever), and having memorized which identical-looking login screens want your email address and which want just the user name
@aeva and of course all involve doing your "single sign on" 5-15 times a day
-
@aeva and of course all involve doing your "single sign on" 5-15 times a day
@aeva oh, and I forgot, the flow and list of auth factors that are allowed is slightly different depending on whether you're actually sitting in front of a machine in the office or remoting in, because of course it is
-
@aeva oh, and I forgot, the flow and list of auth factors that are allowed is slightly different depending on whether you're actually sitting in front of a machine in the office or remoting in, because of course it is
@rygorous you ever wonder if the dominant paradigm in CYBER SECURITY is if you can minimize the human involvement per hour then everything will be ok
-
@rygorous you ever wonder if the dominant paradigm in CYBER SECURITY is if you can minimize the human involvement per hour then everything will be ok
@aeva *checks numbers* Well if our analysis is correct, we could reduce number and severity of incidents massively if no human or program could connect to our services in the first place