Multi-factor Authentication MUST become a de-facto standard on corporate systems

--

Anyone who has an Apple product will know that Apple takes security seriously, and that they make it seamless from a user point-of-view. There’s no having to setup devices that are trusted, Apple seems to know the ones you use, and helps you when needed.

A change of password on a Macbook Pro, flashes up a message on your iPad or your iPhone, for your approval. The chances thus of someone getting direct access to two of your devices at the same time, without being detected (and being able to get into them before you disable them) is very low. I appreciate that you have to have more than one Apple device for this to happen, but it’s possibly a core reason that people trust Apple for security. They have setup a strong eco-system of trust, and make it easy for the user:

Often, on an Apple device, there’s no need for virus scanners and IDS systems, as iOS has a strong control on the applications it allows to run, and has a good trust model. Users thus feel safe.

And Google, too, has done a great job in where you register your devices, and whenever there’s a change of your password on Google —…

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.