SECURITY THEATER
Usability features create security theater: “Remember device”, OTP autofill, and the erosion of MFA
Platforms built “remember device” and AutoFill to improve adoption and reduce support costs — but these features change the threat model and create opportunities for attackers.
We built a cost-effective and easy to implement solution that eliminates the need for "Security Theater".
Human Circumvention of Authentication:
Why friction drives insecure workarounds
WHAT IS SECURITY THEATER
Lowering Security Complexity
This is a growing problem. Security is being put second behind usability. This tradeoff is leaving users, platforms and their data less secure.
Designed for Efficiency not Friction
Security design is promoting efficiency, assisting users to breeze past or all together skip security hurdles as quickly as possible. Security is made as transparent and frictionless, but it is also paper thin and more vulnerable.
Security at the bare minimum
Security for the sake of compliance and nothing more. Allowing users to lower defenses.
All Bark No Bite
Security that says, "Encrypted" in the bottom right, for those who are looking. Or a little lock icon, assuring users that security is somewhere in the background. These images and text are little more than smoke and mirrors. They are not prioritizing security and looking to lead with security as something that is core to them and what differentiates them from the competition.
House of Cards Security
Unless "security" that is tantamount to a House of Cards. Very easy to come tumbling down. Security is barely held together, just enough to have the user feel mildly protected. But any true hacker with the slightest sophistication or software could break it at the drop of a hat.
Circumvention of the Security Theater
Users will often find the opportunity to circumvent even the smallest security hurdles, like 2FA or MFA, if the cause any friction or waste any of their time, energy and productivity. If not properly addressed our security measures when improperly designed can lead to catastrophic results when circumvented.
Security just for show
Security should not be something we just check the box for. It shouldn't just be a gate we put up because of compliance and to reach the bare minimum. Thoughtful implementation, or "Security by Design" needs to be a building block that all companies that want to last have to implement today into their foundation to protect from tomorrow.
SAY HELLO TO
Human-Centric By Design
FOR YOR EYES ONLY AUTH
FYEO is Zero-Trust & Human-Centric Authorization by Design
-
Zero-Trust: Allows grants users real-time seamless access data securely, efficiently and without friction.
-
Human-Centric: A new balance between usability and security is now attainable and available. No more dichotomy, no more tradeoffs, it's time for the best of both worlds.
