MFA soon compulsory for AWS users, passwordless authentication an option (www.csoonline.com)
from BrikoX@lemmy.zip to cybersecurity@sh.itjust.works on 11 Jun 2024 21:20
https://lemmy.zip/post/17193788

AWS account holders can now use FIDO2 passkeys as an authentication method.

#cybersecurity

threaded - newest

recursive_recursion@programming.dev on 11 Jun 2024 22:53 next collapse

tbh this might be a good thing (not talking about amazon)

  • as it normalizes MFA/2FA/TOTP
    • which would help increase adoption
      • and therefore it would increase users’ security hygiene
Anticorp@lemmy.world on 12 Jun 2024 00:48 collapse

2FA is cool for things that are important, like my bank account, or probably my AWS account. We don’t need it for everything and it’s pretty annoying when rinky dink little websites force it on us.

recursive_recursion@programming.dev on 12 Jun 2024 00:59 next collapse

of course👍

the sites that would benefit users the most from implementing these would be those that retains user sensitive information:

  • shopping
  • banking
  • sns
  • medical
EinfachUnersetzlich@lemm.ee on 12 Jun 2024 06:38 collapse

What is sns?

recursive_recursion@programming.dev on 12 Jun 2024 07:51 collapse

ah that’s my bad that’s probably an accidental Koreanism

towerful@programming.dev on 12 Jun 2024 02:53 collapse

Rinky dink little websites should use federated logins, imo.

Anticorp@lemmy.world on 12 Jun 2024 03:33 collapse

Like Discus, Facebook, or Google? The problem with that is then you have another big ass company tracking everything you’re signed up to and selling your data.

jemikwa@lemmy.blahaj.zone on 12 Jun 2024 02:04 collapse

It says in the article that this won’t apply to org member accounts yet, but I wonder how it’ll work eventually. Member accounts created via account factory don’t even have a password, so you have to go through email account recovery to set one and then set up MFA. If this only applies to root users with passwords, that’s fine, otherwise I hope account factory will get a way to set up PW/MFA on a generated root user.