News for hackers. Stuff that matters.
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by pembrook on Friday December 06, 2024 @12:44AM (#42336745)
I’m amazed how we have widely available biometrics in the consumer space (anything Apple with TouchID or FaceID) but not in the realm of business where security is far more critical.

A rational market observer would have assumed biometrics would have replaced antiquated passwords years ago.

Feels like this is a solved problem but Microsoft having a monopoly over business computing and software and there being no agreed upon standards for biometrics hardware is holding us back.

Re:65% of Employees Bypass Cybersecurity Measures, New Study... by rustcleaner on Friday December 06, 2024 @01:51AM (#42337089)
Can we not just make a password prompt which is two 8 digit TOTP codes concatenated together (each having different shared secrets)? Why must we use biometrics, SMS, and proprietary lock-in solutions?

Also, the recent Salt Typhoon revelations need to be screaming at you: Chinese intel (and probably others) can likely access SMS codes without hijacking the number, and that it's probably not far out of reach from criminal gangs considering foreign policy jockeying lately.

Phone verification is dead. Also, everyone should be adopting something like SimpleX (plus Orbot/Tor) and get away from unencrypted normie networks. If before it was just to reduce metadata footprint because data sells, now it's because you could be vulnerable to international criminal organizations which have access just as intimate as Salt Typhoon to US public comms infrastructure.

F***! Odds CISA gets funding cut under new admin? I could use a new job...

Re:65% of Employees Bypass Cybersecurity Measures, New Study... by scarfaceneo on Friday December 06, 2024 @12:47AM (#42336770)
You still need to create a password. And since nearly always the biometric option doesn’t replace the password, it’s a moot point.
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by pembrook on Friday December 06, 2024 @01:13AM (#42336913)
But that’s my point. Why use passwords at all.

If we’re okay using our face to auth into all mobile apps (business, personal or otherwise) and also to auth into the country every time we fly into it, why not just move towards making it standard.

Re:65% of Employees Bypass Cybersecurity Measures, New Study... by n_plus_1_acc on Friday December 06, 2024 @03:17AM (#42337577)
Until you get into an accident and your face is covered in bandages or something and the computer wont let you in.
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by rustcleaner on Friday December 06, 2024 @01:57AM (#42337123)
>If we’re okay using our face to auth

I'm not! If this sort of thing becomes standard, I will become digitally amish.

Re:65% of Employees Bypass Cybersecurity Measures, New Study... by wmf on Friday December 06, 2024 @12:48AM (#42336778)
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by thaumasiotes on Friday December 06, 2024 @12:51AM (#42336797)
> A rational market observer would have assumed biometrics would have replaced antiquated passwords years ago.

Some people prefer that their passwords not be public information.

Re:65% of Employees Bypass Cybersecurity Measures, New Study... by Izkata on Friday December 06, 2024 @01:13AM (#42336908)
In the US, passwords are protected by the 5th Amendment. Face and fingerprint are not. Police can make you unlock with those methods with no repercussions.
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by pembrook on Friday December 06, 2024 @01:16AM (#42336926)
Seems like we should update that.
Re:65% of Employees Bypass Cybersecurity Measures, New Study... by hulitu on Friday December 06, 2024 @02:41AM (#42337369)
> A rational market observer would have assumed biometrics would have replaced antiquated passwords years ago.

Why ? I don't want my picture stored on MS' servers every day.