3 ms·
While we're on this topic, why have some sites started refusing to prompt me for my password and instead are sending codes to my email. slack.com is a great exa
by fred_is_fred 6y ago
While we're on this topic, why have some sites started refusing to prompt me for my password and instead are sending codes to my email. slack.com is a great example. It's like 2FA without the first factor.
- kayman 6y agoIt’s because the average person has so many passwords in various formats that they forget. But that person most likely has access to their email. Instead of taking the user on a password reset journey, just shortcut to login. The attack vector is restricted to email no matter what.
- fred_is_fred 6y agoI suspected that was the case, but I really wish they'd give me an option.