[Outdated, please look at pinned post] Casual Conversation

253 readers

1 users here now

Share a story, ask a question, or start a conversation about (almost) anything you desire. Maybe you'll make some friends in the process.

RULES

Be respectful: no harassment, hate speech, bigotry, and/or trolling
Encourage conversation in your post
Avoid controversial topics such as politics or societal debates
Keep it clean and SFW: No illegal content or anything gross and inappropriate
No solicitation such as ads, promotional content, spam, surveys etc.
Respect privacy: Don’t ask for or share any personal information

Related discussion-focused communities

founded 1 year ago

MODERATORS

[email protected]

151

Any company that still insists on forced password resets and frequent changes needs to learn about Social Engineering and Human Factors. (yiffit.net)

submitted 9 months ago by [email protected] to c/[email protected]

61 comments fedilink hide all child comments

These are the same companies that don't support second factors, only have their app as a second factor, or only SMS second factor. Is it too much to ask for smart card or token (yubikey) support?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 9 points 9 months ago (2 children)

Any Insurance company * (I say so because as an IT Administrator I'm forced to enable this to keep our cyber insurance policy, but I feel rather confident it's unnecessary given the research and our migration to ldap tied fido).

[–] [email protected] 4 points 9 months ago (1 children)

I’m in this boat and I hate it.

[–] [email protected] 2 points 9 months ago

I’ll drink to that!

[–] [email protected] 3 points 9 months ago (1 children)

All I know is the mortgage servicing company I use seems to have started ~3 month interval, that they don't say (no second factor available either). When I went to pay my internet bill, I get greeted with a message "you're passwords been reset". I'm stubborn and I was just using those sites to pay bills, so now I just don't log in to those anymore.

Insurance, and government need to catch up to the research. For sites that support them, I really like the Yubikey as a second factor.

[–] [email protected] 2 points 9 months ago (2 children)

It won’t be too long now before everyone rolls out Passkey support, which will be nice. I fully embrace the death of the password.

[–] [email protected] 2 points 9 months ago

I like your optimism.

[–] [email protected] 1 points 9 months ago (1 children)

And the death of Firefox along with that. Oh boy what a great future.

[–] [email protected] 2 points 9 months ago

Not sure why that would kill Firefox. Mozilla has done great work supporting passkeys and while their implementation isn't fully baked at the moment I have no reason to suspect they'll leave it incomplete.