<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
On 24/01/2023 3:40 p.m., Adam Thompson wrote:<br>
<blockquote type="cite"
cite="mid:YT2PR01MB4622B8C04F010CB399FFA19DABC99@YT2PR01MB4622.CANPRD01.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:EN-CA;}span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1"><span style="mso-fareast-language:EN-US"><o:p></o:p></span>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">I
DO NOT WANT SECURITY that presents any significant chance of
denying me access to my own accounts and resources. SMS or
email-based 2FA schemes are a giant PITA, but both are
fairly easily recoverable when (not if) I lose access to
them. Are they good 2FA? No. Absolutely not. Are they
better than nothing? Yes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">This
entire discussion feels like
</span><a href="https://xkcd.com/538/" moz-do-not-send="true"
class="moz-txt-link-freetext">https://xkcd.com/538/</a> to
me. If someone wants access to my ARIN resources, one of the
easier ways in would be to physically threaten me or my
family, and the best 2FA implementations in the world do
nothing (AFAIK) to protect against that. The specific
technique or technology involved won’t make any difference.</p>
</div>
</blockquote>
<br>
Pretty much my point in the previous consultation:<br>
<br>
<a class="moz-txt-link-freetext" href="https://lists.arin.net/pipermail/arin-consult/2022-May/001665.html">https://lists.arin.net/pipermail/arin-consult/2022-May/001665.html</a><br>
<br>
Intruder traps or me carrying a firearm would probably do more to
secure my<br>
ARIN account (as a side effect of securing myself and my premises)
than any <br>
2FA would. Both of these measures pose...issues...under Canadian
law though...<br>
<br>
Even the part from the mouse-over comment on that comic:<br>
<br>
>Actual actual reality: nobody cares about his secrets.<br>
<br>
Lines up with my comment:<br>
<br>
>That said although IP space is valuable I don't think we are
anywhere <br>
>near people being kidnapped over it, especially a /24 that isn't
eligible <br>
>for a specified transfer for another 3 years.<br>
<br>
<pre class="moz-signature" cols="72">--
Glen A. Pearce
<a class="moz-txt-link-abbreviated" href="mailto:gap@ve4.ca">gap@ve4.ca</a>
Network Manager, Webmaster, Bookkeeper, Fashion Model and Shipping Clerk.
Very Eager 4 Tees
<a class="moz-txt-link-freetext" href="http://www.ve4.ca">http://www.ve4.ca</a>
ARIN Handle VET-17</pre>
</body>
</html>