Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The New Ten-Factor Authentication Processes

mcsweeneys.net

Post reply on HN
Print view View original

1–10 of 107 posts

Re: The New Ten-Factor Authentication Processes

#2

Post by quartesixte »

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden?

McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs.

McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in literary arts.

Re: The New Ten-Factor Authentication Processes

#3

Post by freshpots »

quartesixte wrote: post #2

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden? McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs. McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in lit…

They seem to be in good jest much more than rarely to me:

https://www.mcsweeneys.net/articles/oh-my-fucking-god-get-th...

https://www.mcsweeneys.net/articles/its-decorative-gourd-sea...

https://www.mcsweeneys.net/articles/brandon-our-new-lets-go-...

Re: The New Ten-Factor Authentication Processes

#4

Post by t-writescode »

quartesixte wrote: post #2

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden? McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs. McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in lit…

5-factor auth is an obnoxious thing and real.

  1. username and password for website
  2. token sent to email
  3. login for email (auto logged out)
  4. email 2fa that requires SMS 2FA or Google auth, stored on phone
  5. pincode / face for phone
edit:

Oh! I could add 2 real more:

  -1: password manager login
   0: password manager 2fa

Re: The New Ten-Factor Authentication Processes

#5

Post by ketzo »

quartesixte wrote: post #2

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden? McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs. McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in lit…

I don't think there's quite as much malice as you seem to read into it. Yeah, 2FA is kind of annoying, particularly when you don't have a real concrete understanding of the reasons why it's important.

It's a funny frame device to float a couple different satirical ideas. I'm sure faculty members – and most people – understand that 2FA is a necessary minor annoyance.

Re: The New Ten-Factor Authentication Processes

#6

Post by nuclearnice1 »

quartesixte wrote: post #2

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden? McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs. McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in lit…

Is anyone happy about the accumulation of passwords, authentications and verifications required in the modern technical world?

The founders and investors of 1Password, perhaps.

Re: The New Ten-Factor Authentication Processes

#7

Post by gz5 »

After consulting with the TSA, they added an alternate 2FA process in which access is gated via displaying your University Precheck Card ($199/year) to the webcam, and verifying the subsequent link sent to your university email.

Re: The New Ten-Factor Authentication Processes

#8

Post by ketzo »

> You might think there aren’t enough bells and whistles for us to teach you a new one every time you log on, but there are. And when there aren’t, we’ll switch to a new one.

> Update: It’s come to our attention that some of you don’t drive, which, honestly, just never occurred to us.

Excellent.

Re: The New Ten-Factor Authentication Processes

#9

Post by mcny »

ketzo wrote: post #5
quartesixte wrote: post #2

A sign of the times. Seems like our non-technical brethren find 2FA/MFA a burden? McSweeneys’ satire and parodies are rarely in good jest in my experience. This is a criticism of the move towards 2FA/MFA make no doubt about it. The writer, and the editors who let this through, are not happy about this state of affairs. McSweeney’s isn’t a no-name blog or journal either — its name holds sway over those who work in lit…

I don't think there's quite as much malice as you seem to read into it. Yeah, 2FA is kind of annoying, particularly when you don't have a real concrete understanding of the reasons why it's important. It's a funny frame device to float a couple different satirical ideas. I'm sure faculty members – and most people – understand that 2FA is a necessary minor annoyance.

» I don't think there's quite as much malice as you seem to read into it.

Requiring signing into my Microsoft account (with two step authentication code) every twenty four hours on a company laptop you control is obnoxious. You should educate and empower your employees, not treat them as the weak link in your armor.

Post reply on HN