Exercise 3: Why a "Temporary" MFA Bypass Is No Safer Than a Permanent One — Possible Solution ==================================================================== WHAT THIS CHAPTER SAYS ------------------------------ Per this chapter's warn-box, "a temporary bypass is a window with no built-in end - it stays open until someone remembers to close it, and an attacker who obtained the bypass has no reason to wait." WHO ACTUALLY CONTROLS "TEMPORARY" ------------------------------ The word "temporary" describes an intention, not a mechanism. Unless the bypass has an automatic, enforced expiration built into the system itself, nothing about disabling MFA actually causes it to turn back on by itself - it stays off until a person takes a separate, deliberate action to re-enable it. That means the bypass's real duration is determined by whoever remembers (or forgets, or is never asked) to close it - not by the word "temporary" used when it was requested. WHY AN ATTACKER EXPLOITS THIS GAP SPECIFICALLY ------------------------------ If the bypass was obtained through a social-engineering request in the first place, the attacker has every incentive to act immediately, during exactly the window while the safeguard is down, and zero incentive to remind anyone to turn it back on. The "temporary" framing that made the request sound reasonable to grant is irrelevant to how the account is actually used once the bypass is in place. WHY THIS MAKES IT EQUIVALENT TO A PERMANENT BYPASS IN PRACTICE ------------------------------ A permanent bypass and an un-remembered "temporary" one produce the exact same exposure for as long as both remain unnoticed - the label attached to the request doesn't change what protection is actually missing during that window. Since there's no guaranteed moment where the temporary version is safer than the permanent one, the chapter treats them identically for verification purposes. WHY THIS WORKS AS AN ANSWER ------------------------------ It explains that "temporary" is only an intention, not an enforced mechanism, identifies who actually controls the bypass's real duration, and explains why an attacker's incentives make the gap between "temporary" and "permanent" practically meaningless.