It's hit and miss. Many civilian side agencies have PIV (the civilian version of... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

sybercecurity on June 16, 2021 | parent | context | favorite | on: I Read the Entire Cybersecurity Executive Order; H...

It's hit and miss. Many civilian side agencies have PIV (the civilian version of CAC) cards for login to laptop/desktops, but not mobile phones/tablets. A few agencies have apps are PIV/CAC enabled or have any MFA, but usually one user/pass login. So you see situations where smartcards are used to login to a device, then a username/password to connect to webapps.

jotux on June 16, 2021 [–]

All of DoD uses CAC, which is probably 30%+ of federal employees. And probably 80%+ of all apps DoD employees use are CAC/PIV login.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact