Blog
Using Windows Hello as 2FA for Microsoft Entra? Here’s the Uncomfortable Truth
This article focuses on Windows Hello for Business as used within Microsoft Entra ID (formerly Azure AD) MFA flows. Many of the same principles apply to other desktop-based authentication methods like Okta Fastpass. 1. Windows Hello Is Not 2FA Windows Hello lets users unlock their Windows device using either a biometric (fingerprint or face recognition)…YubiKey or Nothing? There’s a Third Option.
Hardware security keys are the gold standard of enterprise 2FA. No serious security professional disputes that. The problem is not the YubiKey’s security properties – it is everything that comes with running them at scale. 1. The Real Cost of Hardware Keys at Scale The operational model for hardware security keys breaks down quickly in…Beyond Copy Paste: Detecting Retyped AI Answers With Typing Biometrics
The newest form of “AI cheating” does not look like copy paste. Actually most applications block the ability to paste text to prevent the use of AI. But here is what users do: a student reads text from ChatGPT on a phone/screen, then retypes it into an exam box. No paste. No clipboard. No obvious…