

I’m going to brainstorm a few ideas because I’m really curious about this. It sounds like an exciting life to live.
Would these be examples of the following?
- a job interview with a corporate or governmental organization demanding high secrecy where you still have to log into your job portal for some reason.
- you are a consultant on a high security technical project and you are somehow allowed to access the regular internet on a device that’s not your own and use some tools for which you have an account.
These are the only things I can think of. For any regular job, I don’t understand why they wouldn’t just give you a hard token. One of those things that you put on a key ring, which shows you a time-based second factor string of numbers on a little LCD screen.
I had one of those and I was not doing anything sensitive. I was just an environmental educator working for the state government and I had to use it to login to the state laptop to submit my time sheets.
On the other hand, if they won’t give you a hard token, because they’re worried you might bring your own device that looks like a hard token and replicates their hard token except with additional spy hardware, I’m not sure why they are allowing you to log into something on that laptop.
Or if they do expect you to log into something on that laptop, I don’t understand why you’d have to come up with your own custom solution rather than them have some kind of system that everybody uses.









Thanks for sharing! So did everyone have to print out their time based authentication codes, or were there other 2fa options, or do some students just not have 2fa enabled?
So fascinating, seriously.