Microsoft Account passwordless authentication

TonyCarter

VALUED CONTRIBUTOR
Don’t get me started on damn government protocol! Backdoor to encryption? VPNs illegal? As someone who’s worked in many government systems, they don’t have a scoobies about security! One of our clients infrastructure is still on server 2008 simply because they wanna save a buck!
Not just governments I'm afraid...and not just with security.

However, our's seems to have gone for the 'more is better' approach, rather than 'better is better' approach. So we have biometric access (face or fingerprint) on all new laptops; then there's an offline phone-based token app we have to use to get past the next stage (but only when we're WFH); then we need our user-name and password to get into any secure intranet sites...which randomly asks for the one-time token authentication again.

Then there's the 12 layers of 'spy' software (auditing software, file janitor, asset management, encryption, AV, etc.) on the laptops that make an i7-12800H perform like an i3-3400F.
 

SpyderTracks

We love you Ukraine
Resurrecting this old thread.


This date would connect with Windows 12 release, and the death of Windows 10 in October which means all windows systems will be forced to biometric capabilities at a hardware level, in mobile space it's going to be a very small minority that are on older devices without biometric capabilities, I do wonder though how this would affect third world countries like African nations where they would tend to have older android devices.

We'll see if this turns out to be true. I know in the corporate space, in device management, Windows 10 is not "officially supported" for Intune management, and you're unable to perform basic tasks such as autopilot reset on Windows 10 devices even now but they do still allow it, mainly for government customers who tend to fall back on older proven OS from a budget and proven reliability standpoint. I fully expect them to force enterprise domains up to Windows 11 for proper device management via Intune.

I suspect we'll see broader removal of passwords on the web and a move to biometrics via mobile or hardware tokens.
 
Top