3 ms·
https://en.wikipedia.org/wiki/Failure_mode_and_effects_analysis https://en.wikipedia.org/wiki/Failure_mode_and_effects_analy... You don't have to mitigate fail
by forgottenpass 10y ago
https://en.wikipedia.org/wiki/Failure_mode_and_effects_analysis https://en.wikipedia.org/wiki/Failure_mode_and_effects_analy...
You don't have to mitigate failures modes that don't matter.
When you have existing mitigation in place, you can add more failure modes/effects "for free."
- tptacek 10y agoI don't understand, and I'm really trying. What's the additional failure mode --- one I don't already have --- that might get added because of the moral hazard of me having a U2F token?
- forgottenpass 10y agoI'm not saying they come as a package. My original post was only about Facebook's future product decisions after a hypothetical point where they get a large enough portion of their userbase to use 2FA. Edit: I don't want my facebook account to become the _kind_ of thing I'd want to protect with 2FA = I won't use 2FA for facebook.