No.1888
pretty much
i'm forced to use a yubikey now but it doesn't work if i'm connected remotely to my desktop, so there's several things i can only access from the laptop now
connecting remotely itself of course requires a different password + authenticator code before i can access the pc
the client's platforms use okta, which requires its own password on top of windows hello's several times a day, and sometimes an authenticator too
this is not the future i chose.....
No.1894
>>1887>When did "security" and "inconvenience" become synonymous?I think it's been that way forever.
I think these days companies are just trying to shield themselves from human stupidity since most "hacks" are just workers making dumb mistakes. I don't think it will have any effect.
No.1896
>>1888>which requires its own passwordAt least using multiple different passwords theoretically increases security since there are more things to break through. Having a service meant to sync passwords means that having to enter passwords multiple times is nothing but hassle. In fact, that, combined with the constant time-outs forcing you to redo the process every time you take a piss, just increases the risks of
>>1894. Having scripts that fake activity to prevent timeouts is not secure, but I can't get anything done when I need to relogin every 30 goddamn minutes so I've got no choice but to create vulnerabilities.
No.1897
The trick is to be a senior engineer so you can use root passwords that haven't been updated since 2004.
No.1898
>>1897whoops we're implementing a new layer and you have to reset your password once a month haha what a shame can't be helped that's how security standards work
No.2284
>>1898nearly 100% of people I've seen at organizations like this have a password that is basically like "myPassword$1"
and they increment the number at the end every time
everyone else just picks like baby names or some easy-ass shit, and in very bad cases, has a post-it on their desk with their current PW lmao
No.2287
The older I get the worse I adapt to all these forced added security hoops; I wish I could just sign a waiver that if I get hacked its my own damn fault rather than go through all this.
No.2288
>>2284literally me except it's a simple alphanumeric pass that's been pwned
No.2289
password reuse between different accounts is very bad
No.2290
just use a password manager tards
No.2291
>>2290I have one, it's called a pencil and piece of paper.
No.2292
>>2291wouldn't it be difficult to find the password you're looking for if you have a lot of accounts?
No.2293
>>2292I don't have enough accounts to need more than one page, but I know which accounts are newer which means they're further down on the page. If you have a lot of passwords you can also just get a password booklet that's alphabetically sorted if you need it.
No.2294
used to store all my passwords alphabetically in my phone notes, now I use keypass
No.2296
maybe a collection of cut-up index cards
No.2297
You'd have to write down each password twice in case you lost your wallet.
No.2298
>>2284That's probably at the core of why everyone wants 2FA these days. People have a limited capacity for good password creation so all the long-term ones are strong but used for a bunch of accounts and all the short-term ones are super weak shit at the top of any brute force list.