Apple’s version of passkeys are the latest piece of a sprawling identity picture for the Apple platform that isn’t widely supported just yet - which is a perfect time to start learning about it. Passkeys aren’t just Apple; they’re supported on Mac, Windows, Android, and even in our browsers. This evolution in WebAuthn's capabilities means we don’t need physical tokens (although that’s still an option) to have a second factor in auth flows - nor is that other factor tied to a phone number, making it more secure. But for admins, there are plenty of questions we need to figure out. What do we have instead of a username and what is there in lieu of a password? As we develop solutions that work with webauthn, we often use a reference implementation at webauthn.io to test functionality. Our guest today is one of the people behind that site, Matt Miller.
Guests:
Matthew Miller - @iamkale@infosec.exchange
Transcript:
Click here to read the transcript (brought to you this week by Alectrona)
Links:
Sponsors:
If you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!
The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson
We have these computers. And they are truly bastion hosts. Nothing comes in, and only that with which we want goes out. They’re perfect when we finish setting them up. Then people make changes and put apps on there. The changes we can mitigate, the apps require a little more analysis. A common strategy to manage that risk is to employ a reputation-based access such as dictated by zero trust - another is to test apps for vulnerabilities, which in a way feeds back into the zero trust decision mechanism in the end. But what kind of tests can be effective, especially since those compiled runtimes don’t tell us a lot about what’s going on. We’ll chat about this paradigm with today’s guest Niels Hofmans, and look for ways to fill up that task list for 2023!
Guests:
Niels Hofmans - @hazcod
Transcript:
Transcription of this episode brought to you by Alectrona
Click here to read the transcript
Links:
Sponsors:
If you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!
The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson
Spring is coming, and with it, MacADUK’s return to Brighton, England for this year’s first European Mac Admin Conference. We’re talking with two of the organizing committee, Alex Hawes and James Ridsdale about this year’s conference, what attendees can expect, and what’s important to them in a Mac Admins Conference.
Guests:
Transcript:
Click here to read the transcript
Links:
Sponsors:
If you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!
The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson
According to a recent PDQ survey, 85% of people who manage devices are a team of 1. Many of our guests have a small scope to their job: they manage Macs and/or iPhones. But many in IT manage, well, everything. That means being a jack of many traits: knowing just enough about networking, switches, routers, every piece of software used in an organization, budgeting, or whatever is on the docket at the moment. Today we’re going to cover what it’s like to cover such breadth with Ylan.
Guests:
Ylan Muller - @HeyItsYlan
Transcript:
Click here to read the transcript
Sponsors:
If you're interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!
The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson