According to @GoToMyPC support, their #Azure single sign-on does not support #phishing resistant MFA such as #FIDO keys or #WHfB. This makes me wonder about their own internal security.
@NathanMcNulty 2/2
Most people don't understand computers today. 95% of people will paste a URL into Google Search, and then they'll geta paid search result. They'll click on the ad and then be blocked by our DNS filtering, and then put a ticket in that we are blocking https://t.co/irzb0ssBbh.
@NathanMcNulty 1/2 Android 13 doesn't support M365 device passkeys- that is part of it. Granted, those are old phones.
Next, the Microsoft 365 sign-in dialog defaults to password, and the security key component is on the line below. People still default to password.
Eventually they get it
@tcrawford@wordpressdotcom Been a bad week. Rank Math SEO, The PHP vuln , The cert vuln., the node one from today, And a supply chain attack on LiteLLM
@merill This is well produced. If we have a backup tool similar to this that has a lot of permissions, what's the best thing for us to do? Is it the app lock? That and monitoring?
@DavidSacks Can smaller companies afford the compute to run an open weight model like Hugging Face did? I take it one nvidia DGX spark GB 10 won't be enough.