4 ms·
I assumed this is implemented by people that don't know better. Why would you want to promote this instead of normal multi-user solution?
by emteycz 6y ago
I assumed this is implemented by people that don't know better. Why would you want to promote this instead of normal multi-user solution?
- petee 6y agoWorkarounds are usually just a symptoms of an institutional issue - broken tooling, missing functionality, bad UI...I'd be surprised if people wouldn't use a proper solution if it were available, especially considering the hoops they are willing to jump to do it wrong
- obventio56 6y agoI think ignorance is a factor, but also legitimate multi-user solutions might involve a lot more friction than these workarounds (or not exist at all). Say I have 300 employees and 10% will eventually need to access an account (random sample, unknowable beforehand). Does it make sense to have all 300 create accounts vs just putting the info in a password manager for the 10% and calling it a day? Of course at this point you should just disable 2FA if you're going to defeat all it's security benefits, but more and more 2FA isn't optional.