13
edits
Changes
m
Fix grammar
== Issues ==
DUO 2FA has a number of disadvantages and issues. To list a few:
* A cellphone, compatible tablet, or landline is '''mandatory''' to for enrollment in 2FA
* U2F is exclusively supported in the Chrome and [[Chromium]] browsers, despite the presence of a [https://github.com/prefiks/u2f4moz functional plugin] which provides the feature in [[Firefox]]
** A workaround for Firefox has been posted [[Yubikey#Using_with_Virginia_Tech_2-Factor_(Duo login page is actually '''broken''' by use of this plugin)|here]].
* [https://duo.com/legal/privacy Privacy policy] is a joke, and implies almost no level of customer or customer data protection
* Use of app isn't ''real'' 2 factor authentication, as it doesn't require the person initiating login to posses device
** Users may get into the habit of just "pushing the button" when it comes up.
=== Privacy Policy ===
''We also collect device-specific information (e.g. mobile and desktop) from you in order to provide the Services. Device-specific information includes:
* ''attributes (e.g. hardware model, operating system, web browser version, as well as unique device identifiers and characteristics (such as, whether your device is “jailbroken,” whether you have a screen lock in place and whether your device has full disk encryption enabled));''* ''connection information (e.g. name of your mobile operator or ISP, browser type, language and time zone, and mobile phone number); and''* ''device locations (e.g. internet protocol addresses and Wi-Fi).''
''We may need to associate your device-specific information with your Personal Information on a periodic basis in order to confirm you as a user and to check the security on your device.''
Other things they do:
