Jerry 🦙💝🦙I forgot one…
A user name and password counts as two factor authentication. It requires a name AND a password
Andres Jalinton@jerry
That makes the SMS code the third authentication factor, nice!
That makes the SMS code the third authentication factor, nice!
D C Ross@jerry I have a name, I know my password and I am interested in logging in. That's something I have, something I know and something I am.
Three factor authentication, baby.
Mans R@deeseearr @jerry Proper authentication uses five factors: something old, something new, something borrowed, something blue, and a silver sixpence in your shoe.
@deeseearr @jerry What about bears?
Patrick Townsend@jerry
Yeah, as you know, if you hang out in the security space long enough you will hear the most credulous BS about authentication. There really needs to be an "Alice in Wonderland" written for security.
The funniest thing for me is when a customer would send us their PGP private key thinking we would need it to unlock their logs. Uh, no.
Guillaume Ross@jerry If you spell user name with a space isn’t it 3FA then?
Chris@jerry especially if the username is your SSN
Andrew 🚲@jerry I have two middle names so I am extra secure.
Bill Bernard@jerry ok but my name is everywhere, how do I keep that secret?
Brent Cook@jerry as long as you rotate your username regularly, sounds good to me
Viss
Shawn K. O'Shea@jerry something you have and something you know.
A post-it with the password and the fact it’s located under the keyboard.
Kluthulhu' XOR 1=1--@jerry Something you are AND something you know 😏
sigi714@jerry While the username is knowledge, the password is my dogs name and therefore counts as possession factor.
Anssi Kolehmainen@jerry I once sent a company wide email on evening of March 31st that we would be implementing new security measure: daily randomized usernames. All users would need to log in to website to see what their username would be for the next day.
Scott 
Bernard Quatermass@jerry for werewolves and vampires, your name and your bite pattern
Tooth factor authentication
gh0sti 
@jerry hot take right here.