4 ms·
Side question: why is nobody losing their minds over the fact that almost all other MFA actions rely on your phone, which almost always has access to critical s
by hsbauauvhabzb 5y ago
Side question: why is nobody losing their minds over the fact that almost all other MFA actions rely on your phone, which almost always has access to critical services (banking, work mail, personal mail, possibly ssh, etc).
I’m more concerned about losing my Device as many MFA tokens are not backed up in apple ecosystem.
The architecture is flawed for conveniences sake.
- k8sToGo 5y agoUse something like Authy. It supports Backup. Anyways, you are supposed to stash your recovery codes somewhere (not on the phone).
- kevin_thibedeau 5y agoThis is really annoying with employers who assume they can use your personal phone as part of their MFA fig leaf.
- kevincox 5y agoEspecially when it isn't plain TOTP but some custom app.
- hsbauauvhabzb 5y agoGiven the preference I’d rather not carry around an additional phone or hw token. But I fully understand those who don’t appreciate it. You can possibly force bespoke token apps into google Authenticator or the ms variant if they use standard Totp or hotp (ms auth on AAD does not by default but you can force it to provide one during the workflow).
- marc_abonce 5y agoThis is such a big frustration I have with phone based 2fa. It's obvious that the people that push for this are from the first world and have never been mugged or even worried about it.