News for hackers. Stuff that matters.

A comment on The New Ten-Factor Authentication Processes. Parent comment

Re:The New Ten-Factor Authentication Processes by csteubs on Tuesday November 23, 2021 @09:27PM (#29326348)
I remember a DevOps engineer at my last job telling me about a "cheat code" where we could type 'push' into the VPN 2FA prompt to have it pushed as a notification to the enrolled device. I've been typing the same command into every 2FA prompt I encounter since then with no luck. I wish that was a standard convention.
[ Parent | on HN ]
Re:The New Ten-Factor Authentication Processes by detaro on Tuesday November 23, 2021 @09:37PM (#29326397)
There shouldn't be a standard convention for a "cheat code" - if the thing can do push, it just should offer it in the UI.
[ Parent | on HN ]
Re:The New Ten-Factor Authentication Processes by Macha on Tuesday November 23, 2021 @10:06PM (#29326546)
A push notification is still a context switch so you're really only saving the time to find your authenticator app.
[ Parent | on HN ]