Post

And if you step away for 5 minutes everything locks down and you have to start all over again

before I can connect to Cisco vpn I have to authenticate myself in a browser window, which requires me to authenticate on my phone. After which I will need to authenticate myself again on my phone to actually connect to the vpn. And then….PERFORCE

@deeplyclassical.bsky.social ?

So you can't do stuff on your own device, then upload it when you want to ?

True story, I was trying to simplify my hardware down to a small portable Linux device that I could make phonecalls with over VoIP, only to find out the hard way that Apple and Android have a shared monopoly on the internet because it's impossible to 2FA anything without either of the two. 😡

💀💀💀

That's correct

Starting to think this whole globally connected thing is not workable. Any additional security requirements will topple the house of cards.

No kidding. I'm not a software developer, just a regular office worker. But the ridiculous number of times that we have to enter & authenticate our credentials so that we can use software from our already secure work stations & network is insane.

The pain of Okta is real

Replace "game dev cycles" with literally any workplace 🤣

Dont forget about the Nigerian prince who wants to give them $200 million, but first they need to send $50k their way

Even though it's the same laptop on the same secure office network it hasn't left since you were here 16 hours ago.

It's the 5FA Logging into your Microsoft account with MFA after you've already logged into your Windows computer with biometrics. Then logging into an Atlassian thing with its own MFA, even though it's using the same account as the other two.

You work for T2?

logging in for work

Has to be. Bc it's definitely not that they realized rushing things to a partially complete state, releasing it, & then moving on to the next trainwreck, claiming anyone who doesn't like the game in its current state is just a hater is a terrible business model. That's inexplicably still working.

Sometimes they know, but you've gotta convince the auditors of the truth of it too. I only do SOC 2, but I suspect PCI is a problem one too

It makes so much sense. When people have to change multiple passwords, they write them down, which is a major vulnerability.

The alternative is long Dev cycles as they struggle to fix security issue