I admit a little nostalgia for my first few passwords. I used to make jokes in my passwords. Sometimes, I’d make promises (saveMoney!, sleep@More). I’m willing to bet you did the same. What changed? By the time you’re reaching hundreds of account passwords, the joy is gone. Let’s discuss what a passwordless tomorrow looks like.
This year’s Summer Camp looks a little different — Black Hat (August 1-6), DEF CON (August 6-9), and the Diana Initiative (August 21-22) are all happening virtually, and Queercon and BSides have sadly been cancelled. That doesn’t mean there won’t be plenty of learning, networking, and skill-building opportunities available at these sites.
Telephony is a unique business. I initiate a call on a device that I carry in my pocket, and in seconds I can speak to someone on the other side of the world. The call travels over routes owned by a series of different companies through many different jurisdictions. This works because they have agreed to a system of billing that will ensure that if they make the connection happen that they will get paid for it. It is that agreement that enables connections to be so reliable to make, but it also enables toll fraud.
At Duo, we have helped thousands of companies to enable secure access to applications and services. Enterprise multi-factor authentication (MFA) rollouts can be complex and nuanced. We have found that the most successful enterprise rollouts include some upfront analysis and planning that we have outlined in this step-by-step guide.
Can passwordless authentication be trusted? “If someone steals my password, I can change my password. If someone steals my fingerprint, what do I do then?” Every new feature we introduce to our users is potentially a new tactic we provide our adversaries. But don't worry, we made an app for that.
