G
8

That time a co-worker swore 2FA would never matter to me, then it did

Last March my old IT guy told me my small shop didn't need two-factor on the business email, said it was overkill for 6 people. A month later someone got in through my password manager and sent fake invoices to 3 clients, one paid $1,800 before I caught it. Anyone else gotten bad security advice from someone who sounded confident but was just guessing?
2 comments

Log in to join the discussion

Log In
2 Comments
spencer_thomas4
That IT guy cost you real money with his guesswork. Security advice from someone who never had to eat the loss is just an opinion with a paycheck behind it. Rule I live by now: if the person giving the advice isn't the one who deals with the fallout, double check everything they say. Turn on 2FA everywhere that offers it, even for a six person shop, and put a second approval step on any invoice over a few hundred bucks. Clients will grumble for five seconds, then they'll be glad when their money doesn't vanish.
3
sarah_hart
sarah_hart19d ago
Right, but @spencer_thomas4, who eats YOUR losses when you block a legit payment?
5