469
Multifactor auth done right (l.roofo.cc)
submitted 9 months ago by chris@l.roofo.cc to c/programmer_humor@programming.dev
20 comments fedilink hide all child comments

Original https://icosahedron.website/@halcy/111631878003850824

all 22 comments
sorted by: hot top controversial new old
[-] bjoern_tantau@swg-empire.de 56 points 9 months ago

They forgot something old, something borrowed and something blue.

[-] muntedcrocodile@lemmy.world 23 points 9 months ago

da ba dee da ba di

[-] reflex@kbin.social 6 points 9 months ago

da ba dee da ba di

Mm-mmm, waffles.

[-] lemann@lemmy.dbzer0.com 3 points 9 months ago

🤢

[-] HeckGazer@programming.dev 25 points 9 months ago

Wow would you look at that, still none of them cover what SMS is >:( Almost like it's not a second factor, and fuck every corporation that tries to claim that it is

[-] JPAKx4@lemmy.blahaj.zone 42 points 9 months ago

SMS is something you have, IE access to your phone. Doesn't mean it's the best option, SMS is notorious for being insecure

[-] HeckGazer@programming.dev 5 points 9 months ago

The 10,000 support staff with dubious social engineering training at your service provider are not "something you have". Case in point literally a few weeks ago https://arstechnica.com/tech-policy/2023/12/verizon-fell-for-fake-search-warrant-gave-victims-phone-data-to-stalker/

[-] Kethal@lemmy.world 1 points 9 months ago* (last edited 9 months ago)

This is an article describing someone impersonating an officer and submitting a fake warrant. It's incredible that Verizon fell for it, but what does it have to do with SMS?

[-] AVincentInSpace@pawb.social 1 points 8 months ago

It means that if I want access to something that has been texted to you, I don't exactly need to be a government in order to get it.

[-] jaybone@lemmy.world 6 points 9 months ago

It would be fine if it weren’t for sim swapping.

But try asking anyone at your bank about a yubikey and watch them stare at you like you have broccoli growing out of your ears.

[-] Cannacheques@slrpnk.net 16 points 9 months ago

Something random as fuck like what hand your married to and when you broke up with your hand and married your other hand

[-] sv1sjp@lemmy.world 14 points 9 months ago

As I Cybersecurity Consultant, I totally agree

[-] MCHEVA4EVA@lemmy.world 8 points 9 months ago

I get my passwords from the collective unconsciousness.

[-] Natanael@slrpnk.net 6 points 9 months ago

There needs to be an SCP for a password manager

[-] Kissaki@programming.dev 4 points 9 months ago

One time passwords

Forgotten after one use

[-] kherge@beehaw.org 8 points 9 months ago

That last one reads like C’thulhufactor.

[-] EpeeGnome@lemmy.fmhy.net 6 points 9 months ago

Now I want to go play Cultist Simulator or Book of Hours. This list is also a list of the sorts of cards the games use to represent the narrative/puzzle you're playing through. Highly recommend.

[-] the_artic_one@programming.dev 6 points 9 months ago

Welcome... to Nightvale

[-] valen@beehaw.org 3 points 9 months ago

Something you only know in a parallel dimension.

[-] docAvid@midwest.social 1 points 9 months ago

This has some real "crimson eleven delight petrichor" vibes.

this post was submitted on 24 Dec 2023
469 points (99.0% liked)

Programmer Humor

19207 readers
1330 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS
Feyter@programming.dev
anzo@programming.dev
BurningTurtle@programming.dev