4 ms·
One would think that groups like cartels already have access to this system, since access seems to be available to quite literally millions of law enforcement e
by bri3d 4y ago
One would think that groups like cartels already have access to this system, since access seems to be available to quite literally millions of law enforcement employees nationwide.
I think Krebs misses the point a little with the discussion of MFA and PIV cards - sure, this system should absolutely have MFA, but what it really should do is not exist in the first place, and barring that, at least have scoped access control.
- annoyingnoob 4y agoThe US Government pushes MFA hard. If you work in the DoD supply chain you must have MFA. I find it hypocritical that sensitive government data like this is not protected in the way the government prescribes for contractors. This is a 'what is good for the gander is good for the goose' (yes that is backward from typical) situation. Why not make use of ample resources from CISA? https://www.cisa.gov/mfa https://www.cisa.gov/mfa https://www.beyondidentity.com/blog/us-government-now-requiring-phishing-resistant-mfa https://www.beyondidentity.com/blog/us-government-now-requir...