back to article Microsoft gives Windows admins a break and MFA a hard push

Microsoft has given administrators additional flexibility in managing Windows updates and clarified what it meant by stating: "Microsoft will require MFA for all Azure users." The change to the Windows Update for Business deployment service is due to reach general availability by May 24. It allows feature updates to be offered …

  1. Tron Silver badge

    MFA doesn't make things secure.

    It bakes in additional points of vulnerability at which a system can be broken.

    1. Tom Chiverton 1

      Re: MFA doesn't make things secure.

      Esp MS 2FA, which is it's own special app, rather than generic TOTP, because, ummm...

      1. NATTtrash
        Big Brother

        Re: MFA doesn't make things secure.

        Indeed. And what better (commercial) opportunity is there to gather all that user specific profile data with the justification "You have to do it, it is the law!"?

      2. Michael Wojcik Silver badge

        Re: MFA doesn't make things secure.

        Anyone who creates an MFA implementation that doesn't offer generic TOTP, with a human-readable secret (so the user doesn't have to use a QR-code-decoding app), should be beaten soundly.

        I am so, so tired of the "but everyone has a smartphone!" crowd.

        1. bemusedHorseman
          Facepalm

          Re: MFA doesn't make things secure.

          > I am so, so tired of the "but everyone has a smartphone!" crowd.

          The part that really grinds my gears, is people that assume you can do everything with your phone. I keep running into places that refuse to let me pay... with a physical card, they only accept payment through their store app even in person.

          Not everyone is willing, or allowed, to install an app and become on a legal first name basis with every little mom and pop store they go to, never mind the big McMegacorps! The other day, I got stuck in a drive thru with a huge line of honks behind me because the cashier refused to take my order without me providing a loyalty app code! (To the manager's credit, they read that cashier the riot act for holding up the drive thru for 15 minutes like that...)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like