3 ms·
A somewhat educated guess: Probably the "cost-to-serve" metrics that Twitter considers when making these changes. Force 2FA on your most high-profile customers
by sbarre 6y ago
A somewhat educated guess: Probably the "cost-to-serve" metrics that Twitter considers when making these changes.
Force 2FA on your most high-profile customers, and your support costs skyrocket as a steady stream of these customers who didn't want this new and (relatively) complicated measure forget or lose their 2FA setup, and you find yourself constantly resetting it or changing it, which probably in the long term reduces the effectiveness of it since it becomes a routine for your support operation and it's easier for bad actors to fake it.
- input_sh 6y agoI've stumbled upon enough verified accounts that had their display name and photos changed to Elon Musk's and pretended to give away Bitcoins that I believe it's a worthy sacrifice to make.
- sbarre 6y agoYou and me both, but Twitter is a public company with fiduciary responsibilities to shareholders above all else (including the public good), so here we are. Until these kinds of problems affect their brand enough to cause financial harm, don't hold your breath for higher security and accountability measures by default.