"In my view, the idea of separating physical access authentication and network access authentication is a really good idea," Ian Thornton-Trump, CISO at Cyjax, says, adding that "users like PINs!" Anything that can harden remote access while making physical access simpler is a good move, according to Thornton-Trump.
In other words, this move makes your Microsoft account more secure rather than making your Windows 10 device more secure, although the one leads to the other. The PIN itself is never transmitted to the server as it's local to the Windows 10 device, so it cannot be intercepted during transit or stolen from a compromised remote server. If they compromise, guess, steal, your PIN, then they still need access to the machine itself. If someone compromises your Microsoft account password, they can log into your Windows 10 computer from anywhere.
That PIN is useless to anyone without that specific hardware." It's a second factor, in other words, the first being physical access to the Windows 10 device itself. A point that Microsoft itself drives home in a 2017 posting: "The PIN is tied to the specific device on which it was set up. Forget the idea that a four-digit PIN has to be less secure than a 25-character password, as that is missing the point. MORE FROM FORBES This $99 Robot Built From LEGO Bricks Can Scan iPhones For PIN Codes By Davey Winder Is a PIN more secure than a password?Īll of this could leave you a little confused and wondering how a PIN can be more secure than a password? The key is understanding what the PIN protects here and how a PIN actually works in this context.
0 kommentar(er)
