Authentication - Why am I not convinced

Authentication - Why am I not convinced 

Full disclosure:

• My employer provides cyber security services however this is an opinion piece in my personal individual capacity.
• The opinion shared here does not have any bearing on me or my employer.
• This does not constitute as a professional advice in any manner
• Reader discretion advised

What are authentication factors?

Authentication usually uses either one of the three factors:

1. something you know (e.g. a password)
2. something you have (e.g. a phone)
3. something you are (e.g. a fingerprint)

While the first two types of authentications have been in use for long now. In comparison, the third one is relatively new. When you use a combination of any of the three, it's called multi-factor authentication.

One of the often overlooked qualities of any authentication factor is its expendability. Meaning if that factor is compromised in any way, it should be easy to replace it with a new, now secure factor. This is where passwords are the best. If a password is exposed - no problem change it and we're back at the previous assured secured level.

Why I am not convinced

Using "something you have" is like using a code or a random token no. sent to your phone for granting you access. In fact, one of the most common types of authentication factor used these days is a code sent your phone. These are valid only for a predetermined period of time post which they become useless. Using such factor makes it easier for physically close attackers to access your accounts, but potentially harder for remote ones. This also how roughly ~90% of banking transactions is being carried out in India.

Fun fact: NIST in a very subtle way is now saying that text message as 2FA isn't ideal.

Alternatively, using “something you are” is also not safe.

I recently read about how attackers are now using ultra -HD images to recreate fingerprints. Another reason I have my doubts about using "something you are" like your fingerprints have got to do with its lack of expendability. Think about it, you have only 10 fingers to use as an authentication factor. And you're leaving it everywhere you go even without your knowledge. At your local Starbucks, when you're using a common washroom, holding railings for support while on your daily commute. An attacker needs to pick the right place and the factor is compromised, it's lost forever, never to be used again. Now you're left with 9 then 8 and so on and so forth. It does pack a punch, though. Since it isn't as easy as it seems to duplicate it (only time before technology catches up) and hence probably better than the other two. 

Finally, we come to my favourite, " something you know" like a password. I love how passwords can be set up in so many different ways, each unique than the other. The best part is that it's the most expendable among the three.

In conclusion, I'd like to say that using two of these three factors improves your security drastically, yet I expect password to still be around for a long while (alongside one of the other two).

If you liked this post show your love in the comments below. Do write, tweet, IM or FB me (I'm faster to respond on Twitter, though). I'd be happy to know your thoughts. 

Feminism isn't just a woman's issue, It is everyone's issue

I am sorry I am a bit late in getting it out. I had originally planned it to be posted on 8th March as part of my International Woman's Day celebration post. I sincerely apologise and promise to do better in the future.

Feminism isn't just a woman's issue, It is everyone's issue

Let me be honest with you. I do not understand the topic as well as I'd like to. I'm reading more about it and getting there.

But what I can tell you is that feminism isn't a group of bra burning, men hating, woman. It is a group of women and MEN who believe in the notion that woman and man are equals. Speaking in biblical terms, a woman was carved out using one of the rib bones of a man. Which suggests that not only are they equals but better still one-half of a whole. But alas, that's not how the modern woman is.

Recently I came across a news piece that said that the Government has passed a bill raising the maternity leaves to 6 months now. This is huge. I felt WOW not bad, not bad at all. Later I spoke to my mum and she mentioned that the Indian Railways have it even better. Now what I am about to tell you is something that I'm paraphrasing and may not be 100% accurate. As it turns out the Railways has a plan for mothers to take care of their babies by taking a leave of absence up to 2 years or so. Wait it gets better, They can avail these many days anytime between childbirth and till the baby turns 18. Talk about woman welfare! and men don't be sad, for men too can take up to 15 days off as paternity leave. Now this for a government organisation speaks volume about their pedigree. In a recent survey, as many as 78% of the surveyed organisations are looking to hire more woman.

I was curious and I wanted to know more. And I'm afraid it's not such a good news. But what I found is very intriguing. The disparity between man and woman runs deeper and is without an iota of doubt a problem that transcends countries, religion, caste or creed.

• Estonia allows parents to take up to three years of leave, fully paid for the first 435 days. The United States has no policy requiring maternity leave. In fact in the US woman join back work as early as within 2 weeks of childbirth. 
• New Zealand’s women have the smallest gender gap in wages, at 5.6%. United States’ pay gap is 20%. Even today in the US, woman get paid 79 cents to every dollar that a man earns. This is in spite of doing the exact same job, putting in the exact same no. of hours.
• Iceland has the highest number of women CEOs, at 44%. The United States is at 4.0%.
• The United States ranks at 45 for women’s equality. Behind Rwanda, Cuba, Philippines, Jamaica
• Azerbaijan prohibits women from 38 categories of jobs.
• In Belarus, as late as 2014 the number of restrictions on women’s work was reduced from 252 to 182. It still prohibits woman from working in those 182 jobs as a LAW.

I am appalled by all that I've read. It is shameful on everyone's part that we don't treat our women as humans let alone as equals. Women whom we worship as a goddess.

This is a serious issue. And it impacts us all. Sure there will be people who would say that woman have come a long way. But let me remind you that even at jobs considered to be more woman-oriented, the top jobs goes to a man. Look up the top chefs or teachers or any vocation for that matter. The female gender is disproportionately represented. Sure centuries ago this made sense cause it's true a man and a woman aren't built the same. A woman can give birth, men can't. Men were mostly warriors and hunters because their bodies were built that way. But now in the 21st Century, where the survival of a human isn't based on his or her hunting skills, this needs to change. 

This International Woman's Day I request each one of you reading this to pledge that you'd do your bit. Pledge that you'd Step Up, Step In, Stand Up, Sit Down, Support, Nurture and Encourage the woman around you.

With all the love I have to all the woman I know, You're Amazing.

XOXO

__________________________________________________

If you liked this post show your love in the comments below. Do write, tweet, IM or FB me (I'm faster to respond on Twitter, though). I'd be happy to know your thoughts.