MS to Trade Passwords for 2-Factor Authentication

Bret Tobey writes "During a security panel at CEBIT, Microsoft's Senior Director for Trustworthy Computing commented that Longhorn would abandon passwords in favor of two factor authentication. While it's hard to argue for keeping passwords, it does raise questions about where this could all lead. None other than Bruce Schneier pointed out how two factor authentication can fail us."

Comments

MS version

[Anonymous Coward]

Two Factor Authentication, MS style (with apologies to Monty Python).

"What... is your name..."
"What... is your favourite colour?"

Re:MS version

[Infinityis]

Bluescreen of death...no, Redha....auuggghhh!!!

Logging in

[consumer_whore]

Does that mean I have to type in 'password' twice?

Re:Logging in

[ragnar]

No, it means that you will need two post it notes on your monitor.

They're making this problem seem too hard

[Anonymous Coward]

The computer industry should take a clue from the financial services sector. All you need for any system is a simple login screen:

Name:__________
Email address:_________
Birthdate:__________
Last four digits of SSN:________
Mother's maiden name:___________
[OK] [Cancel]

Instant, foolproof security with no hardware to deal with or passwords to remember.

Re:They're making this problem seem too hard

[Jherek Carnelian]

I could crack this in 5 seconds with your pay stub on your desk, and your address book on your desktop.

But yet you still can't seem to crack the secret code known as humor.

They're already doing this!

[nathan s]

Except they don't know how to spell "name" and "favourite colour." :-D

"What...is your login..."
"What...is your password?"

Re:A question worth asking

[Infinityis]

As far as I can tell, two factor identification is the dualization of the encryptable factorization process. When the vector based finglestrup is elongated to the point of dypstrontinazation, we find that standard passwords are, in a word, flangoozled. By dishappening the estronable bases, the possibility of grolingering becomes ziponified. All that said, I fully support two factor identification, and you should too.

Hopefully that helps...

MS ActiveButtPlug Technology...

[Anonymous Coward]

...takes advantage of the fact that the folds in each user's rectum are unique to simultaneously provide secure authentication while promoting prostate health.

Re:Reporting leaves something to be desired

[Infinityis]

I'm sure it'll be something like the following:

"Please enter your login"

"Thank you, please enter your password"

"So far so good. Now, reading over the last few emails you've replied to, it appears you have some trouble 'getting it up'. As a final verification, please confirm the date of your most recent order of Viagra"

Kinda like AdSense, but much more intrusive...

Microsoft's Response

[The Angry Mick]

C: well sonny how can i log on to my internet box and email my friends to let them know what ive gone and done if i cant log on with this here finger scanner

MS Tech Support: Well, I'm afraid Sir that since your copy of Windows had it's product activation linked to that one finger, you're no longer legally licensed to use it. If you'd like, I can make a direct withdrawal from your checking account to purchase a new copy of Windows, complete with Internet Explorer 7.01 that you can activate with any of your remaining digits, or, some other body part that you'd be less likely to be careless with.