Dailywtf

The NSO (No Sign On) Auth Scheme

In what is perhaps the most brilliant act of malicious compliance I have ever witnessed…

Early in my career I bullied my way into a de facto tech lead position on a small software team in a pretty big organization.

The most powerful and vocal of our users used our software passively as a kind of combination dashboard and news aggregator. They had lots of passwords to lots of systems, and they did not want another one for ours. They made this very clear - not one more goddamned password.

Continue reading →