[ home / bans / all ] [ qa / jp / sum ] [ maho ] [ xmas ] [ f / ec ] [ b / poll ] [ tv / bann ] [ toggle-new / tab ]

/maho/ - Magical Circuitboards

Advanced technology is indistinguishable from magic

New Reply

Options
Comment
File
Whitelist Token
Spoiler
Password (For file deletion.)
Markup tags exist for bold, itallics, header, spoiler etc. as listed in " [options] > View Formatting "


[Return] [Bottom] [Catalog]

File:1628709616354.png (1.01 MB,1200x733)

 No.1887

¥ new "single sign-on" service gets implemented
¥ now have to go through six (6) login screens to access my workstation
¥ same password everywhere
¥ have to enter two soft tokens, tied to the same device, same app, same screen even
¥ have to wait for them to refresh and then enter them again to access the app portal even when hardlined into the intranet
When did "security" and "inconvenience" become synonymous? Are they just hoping hackers will decide this labyrinthine series of credential checks and verification pages aren't worth the data behind them and give up?

 No.1888

pretty much
i'm forced to use a yubikey now but it doesn't work if i'm connected remotely to my desktop, so there's several things i can only access from the laptop now
connecting remotely itself of course requires a different password + authenticator code before i can access the pc
the client's platforms use okta, which requires its own password on top of windows hello's several times a day, and sometimes an authenticator too
this is not the future i chose.....

 No.1894

File:[MoyaiSubs] Mewkledreamy -….jpg (416.15 KB,1920x1080)

>>1887
>When did "security" and "inconvenience" become synonymous?
I think it's been that way forever.
I think these days companies are just trying to shield themselves from human stupidity since most "hacks" are just workers making dumb mistakes. I don't think it will have any effect.

 No.1896

>>1888
>which requires its own password
At least using multiple different passwords theoretically increases security since there are more things to break through. Having a service meant to sync passwords means that having to enter passwords multiple times is nothing but hassle. In fact, that, combined with the constant time-outs forcing you to redo the process every time you take a piss, just increases the risks of >>1894. Having scripts that fake activity to prevent timeouts is not secure, but I can't get anything done when I need to relogin every 30 goddamn minutes so I've got no choice but to create vulnerabilities.

 No.1897

The trick is to be a senior engineer so you can use root passwords that haven't been updated since 2004.

 No.1898

>>1897
whoops we're implementing a new layer and you have to reset your password once a month haha what a shame can't be helped that's how security standards work

 No.2284

>>1898
nearly 100% of people I've seen at organizations like this have a password that is basically like "myPassword$1"
and they increment the number at the end every time

everyone else just picks like baby names or some easy-ass shit, and in very bad cases, has a post-it on their desk with their current PW lmao

 No.2287

The older I get the worse I adapt to all these forced added security hoops; I wish I could just sign a waiver that if I get hacked its my own damn fault rather than go through all this.

 No.2288

>>2284
literally me except it's a simple alphanumeric pass that's been pwned

 No.2289

password reuse between different accounts is very bad

 No.2290

just use a password manager tards

 No.2291

>>2290
I have one, it's called a pencil and piece of paper.

 No.2292

>>2291
wouldn't it be difficult to find the password you're looking for if you have a lot of accounts?

 No.2293

>>2292
I don't have enough accounts to need more than one page, but I know which accounts are newer which means they're further down on the page. If you have a lot of passwords you can also just get a password booklet that's alphabetically sorted if you need it.

 No.2294

used to store all my passwords alphabetically in my phone notes, now I use keypass

 No.2296

maybe a collection of cut-up index cards

 No.2297

You'd have to write down each password twice in case you lost your wallet.

 No.2298

>>2284
That's probably at the core of why everyone wants 2FA these days. People have a limited capacity for good password creation so all the long-term ones are strong but used for a bunch of accounts and all the short-term ones are super weak shit at the top of any brute force list.




[Return] [Top] [Catalog] [Post a Reply]
Delete Post [ ]

[ home / bans / all ] [ qa / jp / sum ] [ maho ] [ xmas ] [ f / ec ] [ b / poll ] [ tv / bann ] [ toggle-new / tab ]