handmade.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
handmade.social is for all handmade artisans to create accounts for their Etsy and other handmade business shops.

Server stats:

36
active users

#mfa

1 post1 participant0 posts today

Les mots de passe sont-ils morts ?
Quelle est la différence entre gestion des identités et gestion des accès ?
C'est quoi le 2FA, le MFA, le PasswordLess ?

🎙️ Les réponses à ces questions et bien plus, dans le nouvel épisode du podcast "Tout est sous CTRL" par Centreon !

🎧 Écoutez l'épisode maintenant sur votre plateforme préférée :
open.spotify.com/show/24LgLR47
deezer.com/fr/show/1001329601
podcasts.apple.com/us/podcast/
antennapod.org/deeplink/subscr
youtube.com/watch?v=lBR8vA8NIuE

#OpenSource#IAM#2FA

New Privacy Guides article 🔑✨
by me:

If you are using a YubiKey,

you might get in some situations where you need to reset your key to factory default, and/or set up a backup of it on a spare key.

This tutorial will guide you
through each step to reset and back up your YubiKey successfully, with clear instructions and plenty of visual support.

I hope you find it helpful!

privacyguides.org/articles/202

Eine Freundin schreibt ihre Masterarbeit zum Thema Arbeitsbelastung von medizinischen Fachangestellten (MFA) in Arztpraxen und braucht noch sehr dringend Teilnehmende an ihrer Umfrage. Falls ihr MFA seid oder welche kennt, könntet ihr hier etwas Gutes tun ;) ansonsten bitte teilen, teilen, teilen 😘

gesundarbeiten.sslsurvey.de/MF

Telefoniert, sendet Faxe, schickt Brieftauben an die Medibubble (KIM-Nachrichten sind auch ok 🤓)

#medizin#arzt#mfa

I recently saw an interesting thread elsewhere: someone expressing high frustration with two factor/multifactor authentication in their day to day life, and nearly every response being of agreement, sometimes very vehement. I don’t think most of these people worked in infosec or IT. Some were dealing with MFA on university systems, some on work systems. They all loathed it. But the why expressed by many for the loathing was what was really interesting. Sure, many expressed irritation about being interrupted multiple times a day by MFA prompts, some were annoyed that it was in place for what they saw as systems that “didn’t need to be that secure”, etc. The common refrains one hears from people in security awareness discussions and/or about less user friendly implementations. But the broadest sentiment?

That it didn’t matter because their PII - their SSNs, their credit card numbers, so on and so forth - had already been stolen so many times, that nothing was really being done to stop that from happening, that it was happening more and more and the companies responsible for losing the data weren’t being punished. In the face of all that, they didn’t want to have to keep dealing with the pain of being forced to use MFA when they felt it wasn’t helping anything,

Replied in thread

@Tarah : MFA sucks. Alex Weinert wrote in _2019_, in techcommunity.microsoft.com/t5:

A few days ago, our team helped someone who had been a target of account takeover (ATO). Despite protecting the account with mandatory two-step verification using SMS and the Authenticator app, attackers had broken into the account and changed the password.

MFA had failed.

Every idiot can now hire an "Evil Proxy" service (using EvilGinx2 or similar).

Watch the animated GIF's in phishify.nl/phishing-blog/aitm (such as phishify.nl/img/aitm-phishing.).

We need to fix the web (infosec.exchange/@ErikvanStrat) instead of hanging on to old and failing (heise.de/en/news/Microsoft-Pro) technology with flawed implementations (usenix.org/conference/usenixse).

And we need better passkeys (infosec.exchange/@ErikvanStrat).

@dangoodin
@conorgil

#MFA#2FA#AitM

#LLRX @psuPete Recommends Weekly highlights on #cybersecurity issues, 11/16/24 4 highlights from this week: Warning: Hackers could take over your email account by stealing cookies, even if you have #MFA; US regulator could impose bank-like state supervision regime on #Google; ome of Substack’s Biggest Newsletters Rely on AI Writing Tools; FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023; and Federal CIO focused on cyber, smooth transition in months ahead. llrx.com/2024/11/pete-recommen

www.llrx.comPete Recommends – Weekly highlights on cyber security issues, November 16, 2024 – LLRX

#LLRX #CyberSecurity @bespacific

Pete Recommends – Weekly highlights on cyber security issues, November 16, 2024

Four highlights from this week: Warning: Hackers could take over your email account by stealing cookies, even if you have #MFA ; US regulator could impose bank-like state supervision regime on Google; ome of Substack’s Biggest Newsletters Rely on AI Writing Tools; FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023; and Federal CIO focused on cyber, smooth transition in months ahead.

Posted in: #AI, Cybersecurity, Financial System, #privacy Social Media

llrx.com/2024/11/pete-recommen

www.llrx.comPete Recommends – Weekly highlights on cyber security issues, November 16, 2024 – LLRX