I can see MS making two-factor authentication a requirement (at least by default) for logging onto domains. During employee orientation, you would scan their thumbprint (or their eye, or issue a token), which would then be associated with their user account, for example. Thumbprint and token readers are becoming relatively inexpensive, so one of either could be deployed with every computer. Eventually, I can see all computer cases shipping with a thumbprint reader on their front bezel, and laptops with a reader next to the trackpad. This would make it even easier for companies, as well as home users.
As #5 pointed out, users are the single greatest security risk. If users could, somehow, magically conform 100% of the time to the principles of high security (ex. not using simple passwords, writing passwords down on sticky notes, giving their passwords to co-workers or leaving their computers without locking them), much of this talk of increasing security would be moot.
|