4 ms·
Even the largest companies are not thinking through this carefully enough. When Google wants to verify a login, my android phone comes up with a special proprie
by rhacker 9y ago
Even the largest companies are not thinking through this carefully enough. When Google wants to verify a login, my android phone comes up with a special proprietary Google prompt. Seems nice, but let's look at the flip side. Apple does this too, and about 5 years ago I had an iPhone. Recently I tried to download apps on my mac - and it suddenly required a password - so I tried a bunch of different things I probably had. Nothing was working. I got to a screen to reset the password, and they have a correct working email address for me. Except instead of offering reset via email, there is a prompt for my security questions. I checked my keepass entry for my security questions - SHIT I forgot to record them :( (my mother's maiden name is something like SDFDS$%FE#23 to Apple). So now it leaves me with one more option - authenticate via "..."'s iPhone! I'm thinking great! I will get a text message on my android in a few minutes (since the number is the same). No luck - suddenly I realized that "reset via iphone" means that a special app on my (smashed with a rock-hammer) iPhone will never ever be able to run.
Apple please listen.
- will4274 9y ago> security questions Security questions are a generation of security behind TFA. Everybody was born in the big city closest to their Facebook hometown and your teachers' names are all in the online version of the yearbook. Apple is a hardware company. Google is a consumer cloud services drvien advertising company. It's no surprise that Google's cloud security is decent and Apple terrible.