Triple-A and 2FA explanation for my kid
One day, I was looking at the overall security of my family accounts, from my wife, kid (yes, he is present online even though he does not know it yet), and myself. It was a simple review of AAA (Authentication, Authorization, and Accounting) and a double-check on 2FA (2 factors authentication) for the things we have.
A normal relaxing thing that any DadOps does from time to time, in parallel with checking the router logs (but that is another story). Are you lost? You can check out the first story from this series here.
A(my kid) comes in jumping around, and the conversation suddenly starts, like it always does.
A: What are you doing, daddy?
D: (I tend to be very explicit with him despite the fact he is barely three years old) I am looking over Authentication, Authorization, and Accounting for our family, and mom left some accounts unprotected with two factors of authentication!
A: (A bit puzzled, almost crying) Moooom, dad says that you “unprotect the authentication two”!
D: Look A, let’s not involve mom in this. Daddy will solve it.
A: (Now relaxed) What is Authentication?
D: (I stopped) Hm.
D: Do you remember when we play knock, knock, and you are behind the closed door in your room, and I am outside?
A: (Very hyped about the entire thing) Yup!
D: And I am asking, “Who is there?” and you reply.
A: Yes, yes!
D: Well, that is authentication, I understand you, I know your voice, and I know it is you, so I open the door 🙂
A: (Really concentrated) What about authorization? What is that?
D: Ok, so I opened the door, hugged you, and then you lay down at my ear and asked me: “Can I play with your laptop, daddy?”
A: (Really deep in the described scenario) I want to play with your laptop! Now! Can I?
D: The answer is no! You are too young to use my laptop! And this is authorization. I can open a door for you and “authenticate” you, but I can not authorize actions you are not allowed to do yet.
A: (He understood. Or this is what I felt) And accounting?
D: Ok, let’s think about eating. Eating is something you are “authorized” to request and get. You tell me you are hungry, and I’m preparing something for you. And you eat it. Mom comes into the room and asks – “How much food did A eat?” And I tell her. This is accounting. The level of consumption of resources you are authorized to access, and the report on them, is accounting.
A: And what did mom do with the “two authentications”?
D: That is two factors of authentication.
A: That! What is that?
D: Well, remember the first example when we played knock, knock? Instead of relying on my hearing and opening the door, I first call mom and ask her if she can confirm that the person behind the door is really you! In this case, mom can be seen as my second authentication factor. And after she confirms, we both open the door, hug you, and kiss you 🙂
A: Ooooo, I understand, daddy! (I don’t know if he actually did, but we had a good talk)
Later that night, I had to give more explanations before putting A to sleep. Well, all in a DadOps day 🙂
Before you go…
I would love to know how you explain complicated things to your kid(s). Please leave your thoughts in the comments, and see you later 🙂