Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
TaurusTorus
Mar 27, 2010

Grab the bullshit by the horns

We have to use Yubikeys in the cleanroom and they suck. Wearing gloves means the touch only works some of the time, and every so often they just get disabled and you have to use an alternate login and contact helpdesk and its just awful.

Adbot
ADBOT LOVES YOU

History Comes Inside!
Nov 20, 2004




Johnny Truant posted:

yeah mine was "if you want to wfh, install Authenticator" and that's a pretty big incentive, so

Yeah this is how ours works because it’s necessary to connect to the VPN required for WFH, idgaf in any event because it integrates into the authenticator app where all my other personal 2FA stuff lives already so :shrug:

BrideOfUglycat
Oct 30, 2000

Scientastic posted:

Our finance team have read receipts on all their emails, because they got so fed up with these huge billion dollar businesses saying “what invoices, you’ve never asked us to pay invoices before, what are you talking about?”

Honestly starting to think that if companies actually had to pay their bills on time like the rest of us, the economy would just collapse

The Husband's workplace is having a time along these lines. Major, international conglomerate orders 3 widgets and wants the option to buy more. This is expensive, high hundreds of thousands of dollars. Company tells them it's going to be more expensive unless they order all the widgets at once due to time and pricing. Sure, no problem. 1 widget for one international branch, 2 for another, and 2 for a third.

Just before the first invoice goes out, the major international conglomerate splits off its international branches into their own divisions with their own funding and AP/AR. No worries, right? Just change the header for each branch and send it on its way.

No. Each branch wants their invoices done differently and will not pay an invoice that deviates from their proscribed invoice demands. Oh, and two of them want to cancel their second widgets which have already been purchased for. And, since they are now three different companies, the job numbers can't stay the same. And since the job numbers have to change, so do the billing numbers... And... And... And...

This has been going on for at least six months, and no payment yet.

Cthulu Carl
Apr 16, 2006

Company sent out an email to announce that they'll be changing the password requirements so instead of expiring every 90 days, passwords will soon last a whole year "With stricter complexity requirements".

I cannot wait to see how mangled and impossible to type they'll force passwords to be.

zedprime
Jun 9, 2007

yospos

Thesaurus posted:

What's so great about yubikeys? Is it just a USB stick you have to touch?. We have one now, and afaik it just takes a daily sample of DNA or something to send to Bill gates' Mark of the beast databases
When every adult is assumed to have a smartphone, not a lot is great for the user for yubikeys. But if we are talking about an employer giving you all the tools you need for your job, they are the economic size and cost choice for 2FA.

There's some small advantages to the hardware not having an antenna but it's not like someone's going to use a cell phone authenticator zero day to read your emails.

Ravus Ursus
Mar 30, 2017

"if they want to install an app on my phone they'll have to pay my phone bill."

Are you people handing over your car notes because they make you drive to work?
Are you having them pay your mortgage because you WFH?
Most people check personal poo poo on work computers but when it's time for a 2fa on YOUR phone it's suddenly a problem?

I'm all for eating the rich and dismantling the system but that's a dumb hill to die on.

Killingyouguy!
Sep 8, 2014

I never use fingerprint poo poo bc I assume whoever is storing the fingerprint sends it immediately to the police. Can I claim to be jehovahs witness or something to get out of that poo poo

Pyrtanis
Jun 30, 2007

The ghosts of our glories are gray-bearded guides
Fun Shoe
I already have authenticator on my phone for other things, it's when the company wants to install their own app or have remote wipe access that I'd draw the line.

Content: I'm now working for a heavy equipment rental place in a very rural area. Some older guy in a full on cowboy outfit comes in, leers at me and cracks a gross joke, then looks at me and says:

"Well if that's sexual harassment let me know so I can get my money's worth!" I'm an early 40s curvy married goonette. I cringe to think if I was young and pretty.

oh well at least I'm forklift certified now

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:

Pyrtanis posted:

"Well if that's sexual harassment let me know so I can get my money's worth!" I'm an early 40s curvy married goonette. I cringe to think if I was young and pretty.

oh well at least I'm forklift certified now

Get your money's worth out of that forklift ticket

Ravus Ursus
Mar 30, 2017

Yeah gently caress the bespoke apps that can access your poo poo. I'm talking about generic or universal ones.

Also use the forklift and make a pun about penetration after. No jury will covict you.

Shoehead
Sep 28, 2005

Wassup, Choom?
Ya need sumthin'?
Saw something legitimately traumatic today in the shop, I might take some time

SerthVarnee
Mar 13, 2011

It has been two zero days since last incident.
Big Super Slapstick Hunk
Coming from you, that is a very very scary bar to have cleared.

Scientastic
Mar 1, 2010

TRULY scientastic.
🔬🍒


Ravus Ursus posted:

"if they want to install an app on my phone they'll have to pay my phone bill."

Are you people handing over your car notes because they make you drive to work?
Are you having them pay your mortgage because you WFH?
Most people check personal poo poo on work computers but when it's time for a 2fa on YOUR phone it's suddenly a problem?

I'm all for eating the rich and dismantling the system but that's a dumb hill to die on.

What? These are very clearly different things. Driving to work is not work, if you work from home, your firm should pay for Internet and phone, but obviously not your mortgage. If a company expects you to be accessing work things in your phone, they should give you a phone.

mllaneza
Apr 28, 2007

Veteran, Bermuda Triangle Expeditionary Force, 1993-1952




TaurusTorus posted:

We have to use Yubikeys in the cleanroom and they suck. Wearing gloves means the touch only works some of the time, and every so often they just get disabled and you have to use an alternate login and contact helpdesk and its just awful.

We're testing these for exactly that use case.

https://www.nymi.com/

History Comes Inside!
Nov 20, 2004




Killingyouguy! posted:

I never use fingerprint poo poo bc I assume whoever is storing the fingerprint sends it immediately to the police. Can I claim to be jehovahs witness or something to get out of that poo poo

Yubikeys don’t read fingerprints you just touch them to prove you physically have access to the widget, it’s just a dumb capacitance thing not a clever biometric device.

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:
Yeah gently caress Microsoft and gently caress their authentication app. Not because of what it does, but for how long it takes and how complicated they made it. I have multiple accounts to juggle and spent hours trying to make it work.

Also gently caress Microsoft and the azure/teams bullshit. Why have multiple websites to administrate aspects of the same account? Just have a single portal login ffs.

Mantle
May 15, 2004

I'm not sure if you know but most of the authenticator apps are just implementations of the TOTP protocol. So if you already have authy or something on your phone you can use it even if the software tells you to use ms authenticator.

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:

Mantle posted:

I'm not sure if you know but most of the authenticator apps are just implementations of the TOTP protocol. So if you already have authy or something on your phone you can use it even if the software tells you to use ms authenticator.

I don't understand that nerd poo poo.

Why not have an admin insert your phone number into a database and have Microsoft send a text message with a code like every other dumb app and website?

zedprime
Jun 9, 2007

yospos

Outrail posted:

I don't understand that nerd poo poo.

Why not have an admin insert your phone number into a database and have Microsoft send a text message with a code like every other dumb app and website?
Costs money, can be SIM jacked.

History Comes Inside!
Nov 20, 2004




Outrail posted:

I don't understand that nerd poo poo.

Why not have an admin insert your phone number into a database and have Microsoft send a text message with a code like every other dumb app and website?

Because SMS requires a working network signal and the OTP method requires absolutely no connectivity at all, it’s just nerd maths based on what time it is.

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:

History Comes Inside! posted:

Because SMS requires a working network signal and the OTP method requires absolutely no connectivity at all, it’s just nerd maths based on what time it is.

Outrail posted:

I don't understand that nerd poo poo.

Foxfire_
Nov 8, 2010

It also only takes tricking/bribing a bored mall cell phone kiosk employee to port your number to a different SIM so 2 factor SMSs go to a their phone instead.

Mantle
May 15, 2004

Outrail posted:

I don't understand that nerd poo poo.

It just means that Authy, Google Authenticator, and MS authenticator are all compatible with each other. You don't need to register a new token in a particular software regardless of what the service you are registering says, you can just pick one and put all of your tokens in it.

Zopotantor
Feb 24, 2013

...und ist er drin dann lassen wir ihn niemals wieder raus...

Mantle posted:

It just means that Authy, Google Authenticator, and MS authenticator are all compatible with each other. You don't need to register a new token in a particular software regardless of what the service you are registering says, you can just pick one and put all of your tokens in it.

I'm not sure if they all would work for the Windows login authentication though, that behaves differently in the MS Authenticator app.

SubponticatePoster
Aug 9, 2004

Every day takes figurin' out all over again how to fuckin' live.
Slippery Tilde
We use RSA tokens for 2FA. So username-> password -> tokencode. It's annoying but only mildly. The only real poo poo thing is if you forget your token at work/home. I honestly don't understand why we don't switch to a biometric system. At some point password complexity becomes too much for your average idiot and the only way they can remember a 16-character password is either by writing it down or using plain language, which kind of defeats the purpose of a complex password.

History Comes Inside!
Nov 20, 2004




Absolutely no chance in hell am I trusting any company dumb enough to employ me with my biometric data

SubponticatePoster
Aug 9, 2004

Every day takes figurin' out all over again how to fuckin' live.
Slippery Tilde

History Comes Inside! posted:

Absolutely no chance in hell am I trusting any company dumb enough to employ me with my biometric data
We already have to submit to background checks involving getting fingerprinted, so it's kind of :shrug: (We're also the government so double shrug I guess)

Dameius
Apr 3, 2006
People really need to make better or in most cases any use of key vaults.

Shoehead
Sep 28, 2005

Wassup, Choom?
Ya need sumthin'?

Shoehead posted:

Saw something legitimately traumatic today in the shop, I might take some time

poo poo I didn't even finish typing this out I was really out of it.

A kid fainted and smashed her head into the corner of our counter this morning and was fully out for a few minutes. I legit thought she was dead, her head snapped off that thing hard as hell. I was on my own with her mom trying to roll her over while my boss hid in the corner and eventually she came over to check her skull and neck (she's an Order of Malta volunteer). She left on her own power, Boss interrogated her a little, (for her own guilt I guess) and it turns out she hadn't eaten at all which is a really bad idea. She insisted to her mom she wouldn't eat for the rest of the day either. It's her 13th loving birthday. It's not.. Good

After they left my arms went all floppy, I felt like rayman with no arms or legs but hands and feet. The boss sat down like nothing happened and I had to go right back to piercing almost immediately, finished the day. I kept saying things the wrong way around for my aftercare spiel. I called my wife at lunch and it helped. Not in til Tuesday, but I might call in sick

goatface
Dec 5, 2007

I had a video of that when I was about 6.

I remember it being shit.


Grimey Drawer
As someone who was concussed quite a few times as a teenager (idiot male, underage drinking, played rugby): a few minutes is a long time to go sparko.

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:
If you're fully out for any amount of time you rally should go to a hospital.

Unless you life in a fourth world shithole where medical attention can financially cripple you I guess.

Shoehead
Sep 28, 2005

Wassup, Choom?
Ya need sumthin'?
It's free you just have to wait for ages. I'm worried about her neck too

goatface
Dec 5, 2007

I had a video of that when I was about 6.

I remember it being shit.


Grimey Drawer
At that age, with that time out cold, initial triage should immediately bypass a lot of that wait. They're a lot better about it than they used to be.

Atopian
Sep 23, 2014

I need a security perimeter with Venetian blinds.

zedprime posted:

If I was you nerds' it admin I'm buying $15 refurbished children's tablets if I don't already have a yubi implementation that I can use to give you a 16 step yubikey factor out of retaliation.

I really wouldn't mind as long as it was their device.
Last place I worked had something like that, I just left it in a drawer until I needed it.
I don't object to 2FA, I object to using my personal gear for work. Work devices mean nothing personal, personal devices mean nothing work, no chance of being involved in the relentless parade of fuckups that I've seen over the years when people didn't stick to that.

Azuth0667
Sep 20, 2011

By the word of Zoroaster, no business decision is poor when it involves Ahura Mazda.

zedprime posted:

If I was you nerds' it admin I'm buying $15 refurbished children's tablets if I don't already have a yubi implementation that I can use to give you a 16 step yubikey factor out of retaliation.

They have those and tried to tell us we owe 50$ if anything happens to it so very low rate of adoption. One of my old cantankerous coworkers got one and flushed it down the toilet for reasons he's yet to explain.

Machai
Feb 21, 2013

Azuth0667 posted:

They have those and tried to tell us we owe 50$ if anything happens to it so very low rate of adoption. One of my old cantankerous coworkers got one and flushed it down the toilet for reasons he's yet to explain.

He mixed up #2 and 2fa

Azuth0667
Sep 20, 2011

By the word of Zoroaster, no business decision is poor when it involves Ahura Mazda.

Ravus Ursus posted:

"if they want to install an app on my phone they'll have to pay my phone bill."

Are you people handing over your car notes because they make you drive to work?
Are you having them pay your mortgage because you WFH?
Most people check personal poo poo on work computers but when it's time for a 2fa on YOUR phone it's suddenly a problem?

I'm all for eating the rich and dismantling the system but that's a dumb hill to die on.

Yes, why aren't you? The business office got so tired of my nonsense they issued a credit card for me.

Outrail
Jan 4, 2009

www.sapphicrobotica.com
:roboluv: :love: :roboluv:

Azuth0667 posted:

Yes, why aren't you? The business office got so tired of my nonsense they issued a credit card for me.

Using your Karen powers for good, nice.

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

Azuth0667 posted:

They have those and tried to tell us we owe 50$ if anything happens to it so very low rate of adoption. One of my old cantankerous coworkers got one and flushed it down the toilet for reasons he's yet to explain.

:stare:

Adbot
ADBOT LOVES YOU

peanut
Sep 9, 2007


Pyrtanis posted:

Content: I'm now working for a heavy equipment rental place in a very rural area. Some older guy in a full on cowboy outfit comes in, leers at me and cracks a gross joke, then looks at me and says:

"Well if that's sexual harassment let me know so I can get my money's worth!" I'm an early 40s curvy married goonette. I cringe to think if I was young and pretty.

oh well at least I'm forklift certified now

Sup fellow industrial goonette, it it time to take stewardship and lead the way in ball breaking yo momma jokes.

ps. Ew that guy :(

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply