That’s not really an issue IMO. It’s easy enough to bring up an IM and share a key fob # if needed; we do it at my job on occasion, when people leave their fobs at home, or we’re waiting on replacement fobs because one expired, or a new hire comes on. You just have to both be on IM at the same time, and once logged in, you can stay logged in for a long time - the timeout is usually 24 hours or so, even at my most security-paranoid client.
I also think this story is absolute bullshit.
It saddens me that so many people believe it just because it’s so damn appealing.
Despite being reported everywhere, I still haven’t seen one report that gives the developer’s name.
You know, basic journalism.
Well, the reason the name isn’t reported is that the primary (perhaps only) source is the case study from Verizon. The reason it’s suspicious to me is that I can’t believe that the outsourcing went so well. In my experience, you need to do a lot more communication with the overseas developers and there are inevitable issues.