https://www.shkcorp.com/blog Practical notes on product management, distributed systems, and AI—written from real engineering and product experience. en-us kshameed7@gmail.com (Hameed Syed K) kshameed7@gmail.com (Hameed Syed K) Sun, 18 Oct 2026 00:00:00 GMT https://www.shkcorp.com/blog/iam-chapter-3-authentication-and-mfa https://www.shkcorp.com/blog/iam-chapter-3-authentication-and-mfa Passwords, OTPs, push approval, number matching, FIDO2. Each MFA method exists because the one before it broke — walked through the attacks that forced each upgrade, ending with why AAL3 requires a hardware key. Sun, 18 Oct 2026 00:00:00 GMT kshameed7@gmail.com (Hameed Syed K) iamauthenticationmfaphishingfido2securitystudy-notes