Comment on JP Morgan staff told they must share biometric data to access headquarters

• atomicbocks@sh.itjust.works ⁨3⁩ ⁨weeks⁩ ago

  At one place I worked that was considered our two-factor auth….

  source
• Deestan@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  Well, I do. But it’s because the security layers on the wifi are more strict than on the VPN to such a degree that I can’t actually connect to it from my work laptop.

  source

  • borari@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

    If you can connect to the company vpn from the companies WiFi, they’ve configured their networks wrong.

    source

    • rainwall@piefed.social ⁨3⁩ ⁨weeks⁩ ago

      Some companies do “internet only” wifi where there is no routing to internal services for anyone. A VPN is required, even when at work, to access anything internal wirelessly. Its a perfectly reasonable config that lowers the risk of breach of your internal network by exposing less of it over the air.

      This is also the nominal config for most zero trust networks, but that’s more a consequence of the “always on” nature of those VPN connections.

      source

      • borari@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

        Yeah that’s a good point. I work in a space that’s still very much traditional networks with tiered enclaves accessed by strictly controlled company owned machines, so I tend to forget that zero trust networks and being your own pc places exist tbh.

        source
    • Atherel@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

      Our servers are in a data center and not in the office building. We work remote most of the time and are only in office for important meetings and other things where it’s just easier to work together when sitting on the same table. If you don’t work with confidential data like HR or top management where you have physical things nobody else should see, you don’t have a personal desk because there are more people working than workplaces.

      So the office is just “another place to work”. Wifi and LAN are just for internet, you can’t access internal services without VPN. Makes it way easier to manage instead of heaving to different routes to maintain.

      source
    • Deestan@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      Not quite like that. There is an internal wifi that I can’t get onto, and a public “guest” wifi that half of the tech staff uses and VPNs from.

      Basically the protected wifi only really works on locked-down windows machines, and those aren’t usable for most developers. It’s mostly mac and linux there, and while the protected wifi is supposed to work on those, the IT staff don’t know how.

      source

      • borari@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

        Ah. That makes more sense.

        source
      • Dionysus@leminal.space ⁨2⁩ ⁨weeks⁩ ago

        locked-down windows machines

        I’ve worked in IT since we used Netware with Windows 3.1

        While I totally get what’s being said, it still makes me chuckle.

        source
• CompactFlax@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

  Maybe I should, to establish a pattern.

  But then I’d have to go to the office. Ew. HR is there.

  source