5 ms·
What we really need is minimum authentication standards with incentives for compliance - password reuse isn’t limited to Fortnite.
by xfitm3 8y ago
What we really need is minimum authentication standards with incentives for compliance - password reuse isn’t limited to Fortnite.
- simeonOli 8y agoYou'd think the incentive to not loose your account would be enough!
- simion314 8y agoI get emails from Epic to enable 2 factor often enough, I refuse because I have a strong password, I don't want to give them my phone and I have nothing to lose if I lose my account since I am not spending anything on it. It should be much harder to change the email linked to an account, if the email password is in the data leaks then there is really nothing you can do.
- markild 8y agoI hate the tendency to demand phone number to activate two factor. I see no practice reason why not simple TOTP isn't good enough. It's probably not a practical reason though...
- ams6110 8y agoProbably want phone as fallback auth for the inevitable people who lose their TOTP device and didn't save any emergency codes.
- lotsofpulp 8y agoThat could be setup as an option. The fact that there is no option provided and a phone number is mandatory means that they want to be able to track people with a globally unique identifier.
- slezyr 8y agoThey should use TOTP, no need for phone number. It also can protect you if your password have been leaked. https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm https://en.wikipedia.org/wiki/Time-based_One-time_Password_a...
- bnycum 8y agoThey changed it so you can now use regular TOTP through Google Authenticator or whatever. That's what I use.