Microsoft gives Windows admins a break and MFA a hard push

Microsoft has given administrators additional flexibility in managing Windows updates and clarified what it meant by stating: "Microsoft will require MFA for all Azure users." The change to the Windows Update for Business deployment service is due to reach general availability by May 24. It allows feature updates to be offered …

[Tron]

MFA doesn't make things secure.

It bakes in additional points of vulnerability at which a system can be broken.

[Tom Chiverton 1]

Re: MFA doesn't make things secure.

Esp MS 2FA, which is it's own special app, rather than generic TOTP, because, ummm...

[NATTtrash]

Re: MFA doesn't make things secure.

Indeed. And what better (commercial) opportunity is there to gather all that user specific profile data with the justification "You have to do it, it is the law!"?

[Michael Wojcik]

Re: MFA doesn't make things secure.

Anyone who creates an MFA implementation that doesn't offer generic TOTP, with a human-readable secret (so the user doesn't have to use a QR-code-decoding app), should be beaten soundly.

I am so, so tired of the "but everyone has a smartphone!" crowd.

[bemusedHorseman]

Re: MFA doesn't make things secure.

> I am so, so tired of the "but everyone has a smartphone!" crowd.

The part that really grinds my gears, is people that assume you can do everything with your phone. I keep running into places that refuse to let me pay... with a physical card, they only accept payment through their store app even in person.

Not everyone is willing, or allowed, to install an app and become on a legal first name basis with every little mom and pop store they go to, never mind the big McMegacorps! The other day, I got stuck in a drive thru with a huge line of honks behind me because the cashier refused to take my order without me providing a loyalty app code! (To the manager's credit, they read that cashier the riot act for holding up the drive thru for 15 minutes like that...)