Mastodawn

So Duo (the multifactor authentication service that #infosec loves) has integrated with Persona (the privacy destroying, Peter Thiel backed, AI-linked, facial scanning and mapping "identity verification" software)

You know the recent Discord snafu that received such massive pushback and caused so many people to leave Discord that they've dropped their identity verification?

Yeah, that Persona.

Duo integrates it into Duo Premier, Duo Advantage, and even Duo Essentials...

...which means many working class folks will have no option but to be enrolled into and use Persona...

...or be fired.

https://duo.com/docs/identity-verification

#Duo #Persona #Privacy #Discord #AI

Show thread

hal8999 Feb 27

@tinker The organization must create an account with Persona and drop API keys into Duo.

Admins do nothing, and there is no integration. (see screen shot)

Duo can't create a Persona domain and force an org into using it.

Show thread

hal8999

@tinker Then it takes an additional step to add Persona to an enrollment policy.

You could (if you're stupid) add this to the Global/default enrollment policy. Or (if you're a decent human), create an enrollment policy for a portion of the user population who will pilot the process and provide feedback.

Organizations can carve out parts of their user population to use Persona during enrollment or not use Persona.

Chances are, if an org is enabling Persona globally, their support team is outsourced and not in touch with their users or the users' managers.

If users presents themselves to a manager who knows them, while wearing an Id card...what more do you need for verification?