Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12
Swiss government login AGOV allows multi-factor account sharing
Original: MFA und Account Sharing schlossen sich bis jetzt aus, das Schweizer Behörden Login # AGOV ermöglicht nun genau das 😱 htt
The Swiss authorities' login system AGOV now offers a shared-use feature, allowing several people to use the same account even when multi-factor authentication is enabled. Commenters in the cybersecurity community have reacted with alarm, pointing out that MFA and account sharing have traditionally been considered mutually exclusive, and questioning how the feature affects accountability and security for government services.
Why now: A government login service enabling account sharing under MFA is seen by security observers as a surprising and potentially risky design decision.
AGOVSwiss authoritiesswiss.social
Evidence
- MFA und Account Sharing schlossen sich bis jetzt aus, das Schweizer Behörden Login # AGOV ermöglicht nun genau das 😱 https://www. agov.ch/?c=shareduse&l=de # infosec · tobi82@swiss.social · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/1122367