Kayvan Alikhani (@KayvanAlikhani) profile picture

CEO & Co-founder: https://teapawt.org/t.co/MR7macY5sD

San Francisco, CA
Joined June 2015
Kayvan Alikhani retweeted
Identity and access management infrastructure is misaligned with security networkworld.com/article/307… via @networkworld
2
2
#2FA is available now, it’s working & used by many orgs. Now is the time to help consumers defend themselves with strong auth #ChatSTC
4
3
Over the next 5 years, #2FA will be a "given" – it will be seamless & practically invisible to end-users #ChatSTC
3
4
The SSO service would need to support strong auth & adjust #2FA based on the sensitivity/type of actions users take #ChatSTC
…But, the good news is that users are using #2FA at work & find it effective. User education will help this effort go a long way! #ChatSTC
4
2
Some users aren’t used to #2FA & it can be complex or time consuming. Needs to become more intuitive & fast…. #ChatSTC
3
2
On most services, #2FA *is available* but inactive. Look for it: Security, DEMAND easy to use #2FA from your service providers. #ChatSTC
1
2
FIDO UAF:Replaces PWDs with device side biometric for #authentication. U2F:Combines PWDs with 2nd factor (e.g.: another device) #ChatSTC
2
2
Their devices (built-in biometric features), use SMS / 1-time PWDs, token devices, out-of-band secure messaging & device certs #CHATSTC
1
#2FA boosts consumer confidence in sharing identity info, as it results in a major reduction of compromised services #ChatSTC #CyberAware
Passwords are vulnerable. #2FA raises the bar against ID theft & protects consumer’s data #ChatSTC #CyberAware
2
1
With #2FA, unless the thief has, knows or *is* your 2nd factor, the stolen user id & password are useless #ChatSTC #CyberAware
7
2
It layers one factor on the other, lowering the risk of being “cheated” on by either factor #ChatSTC #CyberAware
1
To ensure it’s *you*, #2FA combines what you know, w/ a 2nd factor-either something you have (device) or you are (biometrics) #ChatSTC
5
2
Senior Dir of Tech @RSASecurity. Recovering Start-up addict. Passionate about biometrics, wearables, mobile auth & a PWD-free world #CHATSTC
2
1
Can criminals use stolen biometric data? Here’s why I think the process is too complex: rsa.im/1OcOb4q
What could criminals do with 5.6 million fingerprint files? I spoke with @sciam about this: rsa.im/1OcOb4q
1