3 ms·
Possibly contrarian point of view: a) Passwords should be easily rememberable. Pick four words are string them together (e.g. correcthorsebatterystaple). b) Yo
by solatic 5y ago
Possibly contrarian point of view:
a) Passwords should be easily rememberable. Pick four words are string them together (e.g. correcthorsebatterystaple).
b) You must have a physical security key to authenticate - a Yubikey etc.
If those two factors are not enough, then forget working from home / mobile authentication - require people to arrive in-person and work in-person, with network restrictions on top of the two-factor authentication.
If two-factor authentication isn't enough, and IP address restrictions aren't of help to enforce know-your-user when they show up in person, then I swear, God help you. At that point, you're no longer practicing security, you're practicing paranoia.
- khalby786 5y ago>network restrictions on top of the two -factor authentication That is exactly what I thought was the case too until I recently entered the code Google Authenticator gave me although my mobile was not connected to the internet. And it worked.
- solatic 5y agoIf you can even reach the login screen, in spite of a network control that's supposed to exist, then your network controls aren't working. TOTP is supposed to work without a network connection.