210
Can I refuse MS Authenticator?
(lemmy.ml)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 May 2024
210 points (94.1% liked)
Asklemmy
43783 readers
1114 users here now
A loosely moderated place to ask open-ended questions
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- !lemmy411@lemmy.ca: a community for finding communities
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
founded 5 years ago
MODERATORS
≥ and force Microsoft Authenticator on the (private) phones of both employees and volunteers.
Refuse to use the service until they provide you with a work appointed phone. Volunteers admitedly have a more difficult time with that but as someone else said you can indeed do text/call options.
With all the tracking that comes with it.
Not much of a privacy risk if it where used for a dedicated purpose and just left off in a drawer otherwise though. My employers pushed the notion of MS authenticator, but left the options to use regular TOTP available, just had to look a bit to find them. Even if they absolutely forced corp software though, a cheap wifi-only setup device is a viable option.
Who cares? It's a work phone that is used only for work, they are entitled and expected to track it as much as my work laptop or any other company equipment. That's not a privacy issue unless you're using company resources for personal stuff. If I don't want them tracking me I just turn it off or leave it at home.
They might expect you to be available via the phone 24/7 and carry such sensor packed device anywhere.
I’ll be available 24/7 when they pay me 24/7.
The point is that the phone will be tracking 24/7 regardless of your actual availability.
A faraday cage on your work desk can take care of that during off hours, especially since most batteries have become non-removable and phones don’t truly shut down anymore. Just put your work phone into the cage when your shift ends, take it back out when your next shift starts. Easy peasy!
And if they demand 24/7 access, they will need to provide 24/7 pay.
Not sure I understand what the faraday cage would accomplish. It's the companies device. You'd be skipping this presumption outlined earlier in the thread
Leaving the work phone at work is a valid answer to me. Assuming that doesn't actually come with any other downsides (working offsite and having to return to the office on unpaid time just to drop off the phone for example).
And my point was that a separate corporate device makes it trivial to manage my privacy and availability. Using my personal phone for work is a hard NO.
Your point is illogical.
You stated
Just to turn around and back-peddle
Are they entitled to it or not? If they're entitled, then why do you have a right to cut it off? I'd argue they have no right to it to track me off hours at all... regardless of the device used. u2f tokens like yubikey would be just as sufficient for 2fa with none of the tracking.
You're so eager to argue that you didn't actually comprehend what I said.
Or I brought up a point that you didn't consider, and rather than addressing it you need to resort to low level ad hominem. You contradicted yourself. Either explain the contradiction or move on. There's no point in this comment unless you're attempting to discredit me without reason which just makes you look bad.
You did it again.
What a great addition to the conversation. Congratulations! You've still addressed nothing!
This is the way.
Agreed. From a privacy perspective, it is a lot safer to run the app in an environment where you have admin control. E.g. disable when not in use, block access to sensitive device information, limit background and network activity as much as possible.
yes? use it solely for work purposes, at work, turn it off when you clock out...
your employer is not your friend.
I work for a global company and help manage MFA for everyone...I use Google's authenticator on my personal phone as they didn't give me a work phone.
I still don't understand why a hardware token isn't being used. It's such a low cost option when compared to buying a phone and plan for a user.
Because you can’t call someone on a hardware token.
But not everyone needs to have a work phone, some just need to authenticate
Then buy them an iPod touch.
you should really use FreeOTP+ instead. https://f-droid.org/en/packages/org.liberty.android.freeotpplus/