Multifactor auth done right

Original https://icosahedron.website/@halcy/111631878003850824

445 points · 17 comments · view on lemmy.world

17 Comments

bjoern_tantau@swg-empire.de · 53 pts · 2y (3 replies)

They forgot something old, something borrowed and something blue.

muntedcrocodile@lemmy.world · 23 pts · 2y (2 replies)

da ba dee da ba di

reflex@kbin.social · 6 pts · 2y (1 reply)
[ removed ]
lemann@lemmy.dbzer0.com · 3 pts · 2y

🤢

HeckGazer@programming.dev · 23 pts · 2y (6 replies)

Wow would you look at that, still none of them cover what SMS is >:( Almost like it's not a second factor, and fuck every corporation that tries to claim that it is

JPAKx4@lemmy.blahaj.zone · 39 pts · 2y (4 replies)

SMS is something you have, IE access to your phone. Doesn't mean it's the best option, SMS is notorious for being insecure

HeckGazer@programming.dev · 5 pts · 2y (3 replies)

The 10,000 support staff with dubious social engineering training at your service provider are not "something you have". Case in point literally a few weeks ago https://arstechnica.com/tech-policy/2023/12/verizon-fell-for-fake-search-warrant-gave-victims-phone-data-to-stalker/

Kethal@lemmy.world · 1 pts · 2y (2 replies)

This is an article describing someone impersonating an officer and submitting a fake warrant. It's incredible that Verizon fell for it, but what does it have to do with SMS?

AVincentInSpace@pawb.social · 1 pts · 2y
[ removed ]
AVincentInSpace@pawb.social · 1 pts · 2y

It means that if I want access to something that has been texted to you, I don't exactly need to be a government in order to get it.

jaybone@lemmy.world · 6 pts · 2y

It would be fine if it weren’t for sim swapping.

But try asking anyone at your bank about a yubikey and watch them stare at you like you have broccoli growing out of your ears.

sv1sjp@lemmy.world · 14 pts · 2y (4 replies)

As I Cybersecurity Consultant, I totally agree

MCHEVA4EVA@lemmy.world · 8 pts · 2y (3 replies)

I get my passwords from the collective unconsciousness.

Natanael@slrpnk.net · 6 pts · 2y (1 reply)

There needs to be an SCP for a password manager

Hazzia@discuss.tchncs.de · 2 pts · 2y
[ removed ]
Kissaki@programming.dev · 4 pts · 2y

One time passwords

Forgotten after one use

Cannacheques@slrpnk.net · 13 pts · 2y

Something random as fuck like what hand your married to and when you broke up with your hand and married your other hand

the_artic_one@programming.dev · 6 pts · 2y

Welcome... to Nightvale

EpeeGnome@lemmy.fmhy.net · 4 pts · 2y

Now I want to go play Cultist Simulator or Book of Hours. This list is also a list of the sorts of cards the games use to represent the narrative/puzzle you're playing through. Highly recommend.

docAvid@midwest.social · 1 pts · 2y

This has some real "crimson eleven delight petrichor" vibes.