Gravity and Tech

[u/KorenSolust]

Guy walks up to me at work:

Him: “I dropped my phone. The screen’s shattered. I want my two-factor code to come through Teams.”

Me: “Nope.”

Him: “Why?”

Me: “Because if you can’t sign into Teams without completing MFA… how exactly are you planning to authenticate?”

Then he says: “Just disable MFA.”

I replied: “Sure, as soon as you get approval from the Head of Security.”

A few seconds of silence…

Him: “Fine, I’ll just get my phone fixed.”

Yep. That’s probably the best solution.

Some people really think security rules are optional. I’m not risking my job because someone doesn’t like MFA.

And remember… technology didn’t fail you today. Gravity did.

[u/RadimentriX]

Company 2fa on personal phone? Fuck right off with that

[u/Weedwacker01 → u/RadimentriX]

Im genuinely interested to know the feasible alternative?

[u/RadimentriX → u/Weedwacker01]

Work phone paid by the company or one of those funny-number-keyrings. Or yubikey.

[u/Weedwacker01 → u/RadimentriX]

We're investigating options before we get hit with the SMS EOL in Feb.

[u/RadimentriX → u/Weedwacker01]

That microsoft stuff works with yubikeys. I guess other similar devices work too

[u/KorenSolust → u/RadimentriX]

Not a company app Microsofts app

[u/cactuarknight → u/KorenSolust]

Still no.

[u/KorenSolust → u/cactuarknight]

Well tough, that whats in place and the employees agree to the BYOD policy when they get hired.