Turn on MFA Before Crooks Do It for You
This is absolutely getting unwieldy to the point of being fucking ridiculous and unusable.<p>I&#x27;ve been in tech for 25+ years. I&#x27;m very familiar with security, and I have the internal endurance to sit patiently and work through IT-related issues.<p>However, at this point, there are just too many broken ways and I&#x27;m at the point of giving up. I use LastPass and if that somehow gets hacked or phished, I lose absolutely everything. I&#x27;m waiting for the next virus or phishing attempt to steal my LastPass password.<p>I use multi-factor authentication on some accounts, but if they use SMS like many sites do, I can get my phone number stolen from me and then I lose access.<p>I use Gmail and Google Authenticator, but if I somehow do something to piss off Google, I can lose my gmail account and access to Google Authenticator and then I&#x27;m really fucked. I&#x27;ve lost some gmail accounts because they will ask me for security questions when I log in with the correct password, and I don&#x27;t remember them so my account gets locked, so they&#x27;re gone forever.<p>What we need is a single way to do login, MFA and security across every single site. We can&#x27;t have every company incorporating their own methods. We need standardized customer support, where Tier 1 customer support can&#x27;t give you access to things like credit card numbers, last 4 digits of SSN, or change passwords. Changing passwords needs to be a higher level, better trained customer support.<p>There needs to be an ISO standard that is well thought out and implemented by all the vendors, or at least all the big vendors. If there&#x27;s a standard way of doing security but also a standard way of doing customer support and what data is exposed to various levels of customer support, then social hackers can&#x27;t take partial info from sites A and B, and use that to social engineer site C.<p>This has to be simplified because it&#x27;s absolutely unwieldy even for a veteran like me. There are too many ways I can get hacked and we are all just sitting ducks. The only thing protecting us is that we aren&#x27;t high-value targets.