this would be more interesting comment if you explained what you were talking about? which of the many are vague and why etc
lightsblinken
because doing that enables pulling together 100% correct answers and leads to cheating? having a exam review where you get to see the answers but not keep the paper might be one way to do this?
i like the idea if username/password with optional passkey as secondary ... ie "something i can keep in my brain" mixed with "something a compute device can do"
having only a passkey doesn't feel like it aligns to a "defense in depth" approach, which we've learned many times over is critical to surviving a single oopsy. someone gets access to your passkey manager (eg phone) then you're fucked.
i'd like layers please!
they said it provides no benefit to them... and i get it - for some things, maybe you don't need "all the security" ... just "enough" of it. for example; i might not need any lock on my laundry room door, i might choose a privacy lock on my toilet room door (no key required to unlock), but i will fit an additional a deadlock on the front door. each has a level of security that i deem to be appropriate. they asserted their opinion about MFA as it pertained to them, not in general.
I'm a security professional also, i don't see the issue with their analogy?
nah, you can care about security and also lose hours on MFA. for global enterprise, the overall user experience is far from optimal imho.
yeah, and the guy was professionally working in the real estate space... feels like they are in the "find out" stage.
you think the developers will continue building if nobody gives them money at the end of the build? either through pre- ("give us money and we'll build you a thing") or post- ("come give us money for this thing we built")
why do bakers even charge for the bread they made?!! its just sitting on the shelf doing nothing?!
46 thousand ... where? maybe 3000 in their town?
exactly :)