{"video_id":"fp_3CsE64SWoX","title":"TQ: [RANT] Signing In Again And Again SUCKS","channel":"Techquickie","show":"Techquickie","published_at":"2021-05-18T17:20:00.116Z","duration_s":217,"segments":[{"start_s":0.0,"end_s":7.16,"text":"You know what really charrs my veal? When websites or apps you're using randomly sign you out at the worst possible time.","speaker":null,"is_sponsor":0},{"start_s":7.16,"end_s":10.32,"text":"Your boss has sent you something urgent, but you can't reply in time due to the rigour","speaker":null,"is_sponsor":0},{"start_s":10.32,"end_s":15.92,"text":"moral of signing back in, and suddenly you're unemployed and out on the streets.","speaker":null,"is_sponsor":0},{"start_s":15.92,"end_s":22.48,"text":"Hey, if it happened to me, it could happen to you. Okay, maybe it's not a fat dire, but services that end your session with no warning are","speaker":null,"is_sponsor":0},{"start_s":22.48,"end_s":29.24,"text":"infuriating. So, why does it happen? Typically, it comes down to the service trying to keep you secure in some way.","speaker":null,"is_sponsor":0},{"start_s":29.24,"end_s":32.32,"text":"And I get it, staying safe online is super important.","speaker":null,"is_sponsor":0},{"start_s":32.32,"end_s":38.44,"text":"But why is signing you out a solution? Typically, services can sign you out after a certain amount of time has passed since","speaker":null,"is_sponsor":0},{"start_s":38.44,"end_s":41.88,"text":"your last sign in or since you were last active.","speaker":null,"is_sponsor":0},{"start_s":41.88,"end_s":45.64,"text":"This is to help prevent an attacker who has broken into your account from having access","speaker":null,"is_sponsor":0},{"start_s":45.64,"end_s":51.24,"text":"to it indefinitely. Let's say that someone gets into your PC, where you're already signed into a service","speaker":null,"is_sponsor":0},{"start_s":51.24,"end_s":56.16,"text":"that you use all the time. Having an expiration date on your session, which can be done through the use of cookies","speaker":null,"is_sponsor":0},{"start_s":56.16,"end_s":59.96,"text":"if you're going through a web browser, means that at some point, the attacker will need","speaker":null,"is_sponsor":0},{"start_s":59.96,"end_s":65.08,"text":"to actually have your password and possibly your two-factor device to get back in.","speaker":null,"is_sponsor":0},{"start_s":65.08,"end_s":68.64,"text":"Different services can set very different sign-in intervals, explaining why you might","speaker":null,"is_sponsor":0},{"start_s":68.64,"end_s":72.88,"text":"never have problems with something like Twitter, while Gmail can be very annoying when you're","speaker":null,"is_sponsor":0},{"start_s":72.88,"end_s":75.92,"text":"trying to pull up an important work message or a sheet or a doc.","speaker":null,"is_sponsor":0},{"start_s":75.92,"end_s":79.64,"text":"Of course, this sign-in duration thing isn't exactly foolproof, so a service might make","speaker":null,"is_sponsor":0},{"start_s":79.64,"end_s":85.4,"text":"you sign back in if it detects something is amiss through a technique called fingerprinting.","speaker":null,"is_sponsor":0},{"start_s":85.4,"end_s":89.48,"text":"This is when a service collects data on you to make it easier to identify you.","speaker":null,"is_sponsor":0},{"start_s":89.48,"end_s":95.08,"text":"And although this obviously raises privacy concerns, it can help from a security perspective.","speaker":null,"is_sponsor":0},{"start_s":95.08,"end_s":98.96,"text":"For example, sites can track everything from your location to the size of the screen you're","speaker":null,"is_sponsor":0},{"start_s":98.96,"end_s":105.88,"text":"using to your audio configuration. And if there's enough of a change in those things the next time you use the service,","speaker":null,"is_sponsor":0},{"start_s":105.88,"end_s":112.16,"text":"it may trigger a request to sign in again. Just in case these changes aren't the result of simply using your laptop in a different","speaker":null,"is_sponsor":0},{"start_s":112.16,"end_s":116.4,"text":"location when you get off the airplane, and it's actually the result of an attacker trying","speaker":null,"is_sponsor":0},{"start_s":116.4,"end_s":122.84,"text":"to drain your bank account. But because fingerprinting has plenty of privacy-conscious critics, certain browsers are trying to make","speaker":null,"is_sponsor":0},{"start_s":122.84,"end_s":126.48,"text":"it difficult for services to track you for any reason.","speaker":null,"is_sponsor":0},{"start_s":126.48,"end_s":130.8,"text":"Therefore, it's becoming more common for browsers to block or delete tracking cookies,","speaker":null,"is_sponsor":0},{"start_s":130.8,"end_s":137.04,"text":"especially if they originate from a different domain. One funny example is if you're trying to use Microsoft Teams, your browser might be","speaker":null,"is_sponsor":0},{"start_s":137.04,"end_s":142.0,"text":"deleting cookies from Skype.com, which actually ties into the team's service.","speaker":null,"is_sponsor":0},{"start_s":142.0,"end_s":145.96,"text":"So you might get prompts to sign in more often than you'd expect, or even more often","speaker":null,"is_sponsor":0},{"start_s":145.96,"end_s":150.56,"text":"than Microsoft themselves would like.","speaker":null,"is_sponsor":0},{"start_s":150.56,"end_s":155.04,"text":"Thanks Microsoft. Alright, fine. All this inconvenience is here to keep me safe.","speaker":null,"is_sponsor":0},{"start_s":155.04,"end_s":159.52,"text":"That might be alright if this actually worked as intended, but it often doesn't.","speaker":null,"is_sponsor":0},{"start_s":159.52,"end_s":163.96,"text":"Sometimes you can get signed out because your organization doesn't manage saved credentials","speaker":null,"is_sponsor":0},{"start_s":163.96,"end_s":169.32,"text":"correctly. This is a huge problem with services often used for office communications, like Teams.","speaker":null,"is_sponsor":0},{"start_s":169.32,"end_s":176.64,"text":"Other times, authentication issues can rear their ugly heads. For example, the much-blind Microsoft Teams works together with the Microsoft Authenticator","speaker":null,"is_sponsor":0},{"start_s":176.64,"end_s":183.4,"text":"app if you're trying to use it on a smartphone. So if Teams is misbehaving, you might burn lots of time trying to solve the issue with","speaker":null,"is_sponsor":0},{"start_s":183.4,"end_s":188.28,"text":"the Teams app itself when the actual solution is to clear the Authenticator's cache and","speaker":null,"is_sponsor":0},{"start_s":188.28,"end_s":194.48,"text":"restart it. So the bottom line is that unless something on your device or within your organization","speaker":null,"is_sponsor":0},{"start_s":194.48,"end_s":198.64,"text":"is configured incorrectly, you might be at the mercy of this service themselves.","speaker":null,"is_sponsor":0},{"start_s":198.64,"end_s":202.64,"text":"So stay cool if you're randomly asked to sign in again, and remember not to try and","speaker":null,"is_sponsor":0},{"start_s":202.64,"end_s":206.16,"text":"punch in your 20-character password while you're driving on the freeway.","speaker":null,"is_sponsor":0},{"start_s":206.16,"end_s":209.72,"text":"The cops probably won't buy your juice of being safety conscious.","speaker":null,"is_sponsor":0},{"start_s":209.72,"end_s":214.68,"text":"So thanks for watching guys. If you liked this video, hit like, hit subscribe, and hit us up in the comment section of course","speaker":null,"is_sponsor":0},{"start_s":214.68,"end_s":217.04,"text":"with your ideas for topics that we should cover in the future.","speaker":null,"is_sponsor":0}],"full_text":"You know what really charrs my veal? When websites or apps you're using randomly sign you out at the worst possible time. Your boss has sent you something urgent, but you can't reply in time due to the rigour moral of signing back in, and suddenly you're unemployed and out on the streets. Hey, if it happened to me, it could happen to you. Okay, maybe it's not a fat dire, but services that end your session with no warning are infuriating. So, why does it happen? Typically, it comes down to the service trying to keep you secure in some way. And I get it, staying safe online is super important. But why is signing you out a solution? Typically, services can sign you out after a certain amount of time has passed since your last sign in or since you were last active. This is to help prevent an attacker who has broken into your account from having access to it indefinitely. Let's say that someone gets into your PC, where you're already signed into a service that you use all the time. Having an expiration date on your session, which can be done through the use of cookies if you're going through a web browser, means that at some point, the attacker will need to actually have your password and possibly your two-factor device to get back in. Different services can set very different sign-in intervals, explaining why you might never have problems with something like Twitter, while Gmail can be very annoying when you're trying to pull up an important work message or a sheet or a doc. Of course, this sign-in duration thing isn't exactly foolproof, so a service might make you sign back in if it detects something is amiss through a technique called fingerprinting. This is when a service collects data on you to make it easier to identify you. And although this obviously raises privacy concerns, it can help from a security perspective. For example, sites can track everything from your location to the size of the screen you're using to your audio configuration. And if there's enough of a change in those things the next time you use the service, it may trigger a request to sign in again. Just in case these changes aren't the result of simply using your laptop in a different location when you get off the airplane, and it's actually the result of an attacker trying to drain your bank account. But because fingerprinting has plenty of privacy-conscious critics, certain browsers are trying to make it difficult for services to track you for any reason. Therefore, it's becoming more common for browsers to block or delete tracking cookies, especially if they originate from a different domain. One funny example is if you're trying to use Microsoft Teams, your browser might be deleting cookies from Skype.com, which actually ties into the team's service. So you might get prompts to sign in more often than you'd expect, or even more often than Microsoft themselves would like. Thanks Microsoft. Alright, fine. All this inconvenience is here to keep me safe. That might be alright if this actually worked as intended, but it often doesn't. Sometimes you can get signed out because your organization doesn't manage saved credentials correctly. This is a huge problem with services often used for office communications, like Teams. Other times, authentication issues can rear their ugly heads. For example, the much-blind Microsoft Teams works together with the Microsoft Authenticator app if you're trying to use it on a smartphone. So if Teams is misbehaving, you might burn lots of time trying to solve the issue with the Teams app itself when the actual solution is to clear the Authenticator's cache and restart it. So the bottom line is that unless something on your device or within your organization is configured incorrectly, you might be at the mercy of this service themselves. So stay cool if you're randomly asked to sign in again, and remember not to try and punch in your 20-character password while you're driving on the freeway. The cops probably won't buy your juice of being safety conscious. So thanks for watching guys. If you liked this video, hit like, hit subscribe, and hit us up in the comment section of course with your ideas for topics that we should cover in the future."}