• 62 Posts
  • 3.44K Comments
Joined 2 years ago
cake
Cake day: June 9th, 2024

help-circle


  • I’m going to brainstorm a few ideas because I’m really curious about this. It sounds like an exciting life to live.

    Would these be examples of the following?

    • a job interview with a corporate or governmental organization demanding high secrecy where you still have to log into your job portal for some reason.
    • you are a consultant on a high security technical project and you are somehow allowed to access the regular internet on a device that’s not your own and use some tools for which you have an account.

    These are the only things I can think of. For any regular job, I don’t understand why they wouldn’t just give you a hard token. One of those things that you put on a key ring, which shows you a time-based second factor string of numbers on a little LCD screen.

    I had one of those and I was not doing anything sensitive. I was just an environmental educator working for the state government and I had to use it to login to the state laptop to submit my time sheets.

    On the other hand, if they won’t give you a hard token, because they’re worried you might bring your own device that looks like a hard token and replicates their hard token except with additional spy hardware, I’m not sure why they are allowing you to log into something on that laptop.

    Or if they do expect you to log into something on that laptop, I don’t understand why you’d have to come up with your own custom solution rather than them have some kind of system that everybody uses.