Microsoft Account passwordless authentication

[TonyCarter]

Don’t get me started on damn government protocol! Backdoor to encryption? VPNs illegal? As someone who’s worked in many government systems, they don’t have a scoobies about security! One of our clients infrastructure is still on server 2008 simply because they wanna save a buck!

Not just governments I'm afraid...and not just with security.

However, our's seems to have gone for the 'more is better' approach, rather than 'better is better' approach. So we have biometric access (face or fingerprint) on all new laptops; then there's an offline phone-based token app we have to use to get past the next stage (but only when we're WFH); then we need our user-name and password to get into any secure intranet sites...which randomly asks for the one-time token authentication again.

Then there's the 12 layers of 'spy' software (auditing software, file janitor, asset management, encryption, AV, etc.) on the laptops that make an i7-12800H perform like an i3-3400F.