Re:Password expiration is dead, long live passwords
by snarf21 on Monday June 03, 2019 @08:48AM
(#20082544)
MFA does not mean no sharing. It is trivial to setup up multiple credentials for the same account. You can easily have two different fingerprints setup as 2FA from two different devices for the same account. Most services let you have backup codes and dongles already. This is mostly an issue of education. We already see a lot of these kinds of other factors like sending a message to device 1 when provisioning device 2.
[ Parent
| on HN ]
Re:Password expiration is dead, long live passwords
by bluGill on Monday June 03, 2019 @09:19AM
(#20082783)
In theory you are correct. In practice very few systems are set up so that two different people can share an account without using a shared password.
Re:Password expiration is dead, long live passwords
by mrandish on Tuesday June 04, 2019 @12:36PM
(#20096651)
> It is trivial to setup up multiple credentials for the same account.
Unfortunately, some very popular 2FA keygen apps can't handle multiple device linked to a single account. I have a well-known service provider that uses a well-known company's app for 2FA. Unfortunately, this app has to be reset to a new device code on changing of the phone's sim card. I wanted to set up two sim cards so I could switch between them for a trip overseas but this is not supported and my service provider does not support other 2FA such as Google or MSFT's app which are not tied to the sim card.