27
you are viewing a single comment's thread
view the rest of the comments

But why in-person? Surely the priority should be resetting passwords quickly, and doing it in-person is far from quick.

manually validating employees' identities on camera

A password has nothing to do with validating your identity, it's merely about authentication. Authentication and authorization are completely separate concepts. They should be resetting authentication to limit chance that an outside attacker can use compromised credentials, and then perhaps re-verifying identities separately for people with access to critical systems first.

Resetting passwords in-person sounds terrible. I use a password manager, so I would be more likely to make a bad password than a good one if I have to do it in front of someone in an interview.

[-] blarth@thelemmy.club 5 points 3 days ago

Maybe they’re handing out FIDO2 hardware tokens during the in person meeting.

Yeah, that would be nice. But I honestly doubt it.

load more comments (4 replies)
this post was submitted on 16 Sep 2024
27 points (100.0% liked)

Cybersecurity

5408 readers
92 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS