my school made it so in order to log in to my schools sites I need to use my phone
banned-users
Phi Kappa Chi ΦΚΧ <a:yeah:589703000977571860><a:ppHop:536353159615086612>
Wednesday, June 3, 2020
every fucking time
(or every 30 days)
2FA is bad
on top of my username and password
this is retarded
the push notification is the best, because you can route that to your PC
Also had to download an app
where the push notification goes through
yeah, but you can route that to your pc
if you really want to
it's all dumb though
no point if I only have to do it once every 30 days
2fA doesn't actually protect anything
but I hate it
I already use a password manager and have unique passwords for every site I use
Pika is the big gay
got it
>not using the same password for every site
what a nerd
fag
I could not keep using thisisapassword1234
on all my accounts
it had to change
thisisapassword1234!
While that is not exactly my old password, that is along the idea of an old password I use to use
i use the same password for everything but i used dice rolls to create it kappa4
spooky help. My university uses two different sites
I need to log in to both
every 30 days
NotLikeThis
what is your school even protecting?
email, bank, and social media maybe make sense to actually protect
but your school site?
They want us to enter our social insurance numbers on our school account for tax information
I did not
because fuck them
my email is just my name, if you know that you can email me
they do not store bank info
2FA makes sense for using a new device, but forcing it on an already trusted device is retarded
Our school does the exact same thing
same
I wish physical keys caught on more
YubiKey is gay, but I like the idea
force students to get one of these and put an rfid chip in their ids
that's worse, I like the idea of a dongle on your keychain, that unlocks accounts on devices within 10ft of you or whatever
with a password of course
can't plug a smartcard into your phone
bringing about the decline of smartphone use is a great side-effect
you can read rfids with a smartphone anyway
wait thats nfc
not a lot of them, I thought they were moving to a new standard
which is why GooglePay or whatever the android equivalent of ApplePay is fucked right now
every month the government issues you 50 device chips that let you turn on an electronic device
Physical keys are great
They make simple USB keys
2fa isn’t bad
2fa in general needs to catch on more
2fa is a waste of time
Yeah
Nah
fuck it
literally just don't use the same password on everything
As a sys admin in training, I strongly support 2fa and all that good stuff
Chapter 11 my friends
as a general user of technology. I am not using something that is tedious and annoying just for minor security improvements
I also don't want to give every website in the world my phone
frequent forced password changes are one of the worst things for security, so I would extend that to frequent forced 2FA checks as well
Spooky has physical key pilled me
making it so you can't login without a personal physical key makes the most sense
because when would you ever need to login when you are not near your pc
/have your key
then you get to deal with the idiots who carry around their laptops with the physical key in the front pocket of the bag
yeah well, people are retards
Not a fan of password experations
What a classic
not a fan of monthly password expirations
Classic