4 ms·
>To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account. And yet they actu
by NaturalPhallacy 4y ago
>To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account.
And yet they actually demanded I give them mine, and have repeatedly, recently demanded a confirmation.
Phone numbers are one of the worst 2fas.
- phreack 4y agoAmen. Google is asking me to add 2FA to an account for work, and there's no way to do so except from phone numbers or Google Authenticator which I'd rather not use. It's the only service that doesn't let me use something like Authy for OTP.
- t-sauer 4y agoI have the 2FA for my work account in 1Password (if that's reasonable is another discussion) so there should be a way to use something else besides Google Authenticator or phone number.
- kernelcurry 4y agoThat is not entirely true. If I remember correctly, if you select the Google Authenticator as your option, it will display a QR code. You can then scan the QR code and the OTP information will be in that payload that can then be pasted into you app of choose. (How o got mine I to 1Password)
- londons_explore 4y agoYou know Google Authenticator is just an implementation of the TOTP open standard right? There are plenty of alternative apps that will give you the same number to key in...
- wlesieutre 4y agoAuthy included
- OJFord 4y agoTotally understandable GP wouldn't know that, from what I recall of logging in to a Google account when I did that at all often (a few years ago, but relatively recently) Google does its best to hide that. (If you want it, mine's another recommendation for Authy.)
- phreack 4y agoYeah I did not know you could use any TOTP besides Google Auth but even that that's not an option that's presented to me anymore at the moment now that I'm checking.
- collegeburner 4y agoThe nice thing about TOTP is i can put it in my password manager which makes life a whole lot more convenient. W for open standards.
- leviathan 4y agoIf you’re on a Mac, in safari you can just right click on the QR code and set it up in keychain, then you can just auto fill from safari, no need for a third party app.
- crossroadsguy 4y agoYou might want to keep at least your email decoupled from a particular Hardware+OS+Browser combo.
- grapescheesee 4y agoNot if they flag you before, which is the same thing Twitter requests.
- abawany 4y agoI was very pleased to discover that most of the KeePass/KDBX apps (e.g. KeePassXC) also support storing this data and generating the TOTP.
- lijogdfljk 4y agoDo you have something against TOTP? Isn't it better than Authy?
- anderiv 4y agoAuthy is a TOTP app.
- lijogdfljk 4y agoAh, i thought Authy was a service. So.. why can't OP use Authy with Google? Google Auth is just TOTP, yet Authy is not capable of using it somehow? I'm so confused lol. I've used plenty of TOTP apps with Google.
- anderiv 4y agoWho knows. User error or misunderstanding perhaps. I use Authy with many Google accounts without issue.
- tialaramex 4y agoGoogle will allow you to use (and they prefer, and you should too) a Security Key. I use this wherever I can. I don't Tweet, but if I did it would be secured with Security Keys. I have Facebook only inside a single contain on one machine, secured with Security Keys. And so on for many services. More services should do WebAuthn.
- phreack 4y agoI hear you but they're expensive where I live. For the moment that's not an option though I'm looking into getting one at some point.
- phreack 4y agoReplying to everyone who said to use Google Authenticator. I in fact did fall for the devious wording that implied no other Auth app would work but never fear, even that is not an option for my account now that I'm checking. The only available options are physical security keys (which I lack), phone numbers (which I won't disclose), and tapping a notification on an Android phone (which ties me even more into the Google ecosystem and I'd rather not pick). I'll appreciate any comments if anyone knows how to get a TOTP going with Authy for Gmail, don't assume I know everything and I'm willfully ignoring it!
- jjluoma 4y ago2-step verification can be turned on by going to https://myaccount.google.com/ https://myaccount.google.com/ and selecting security and then "Signing in to Google". The "2-step verification" finally leads to the point where phone number is asked for enabling SMS based verification. Only after enabling SMS based verification it is possible to enable Authenticator App (TOTP) or some other options. At least I couldn't find other way to enable TOTP i.e. first SMS.
- joegahona 4y agoI was just able to remove my phone number from my account settings and wandered into a Fred Sanford-level of junk data -- Twitter had me identified as a female (I'm male), had "interests" tied to me for both "Alexandria Ocasio-Cortez" and "Ben Shapiro" (they're most certainly not), and had my languages as "French" and "Indonesian" (I know only English). Bad digital hygiene.
- withinboredom 4y agoGoogle always reverts back to Portuguese for me. No matter how many times I've changed it back. I went to Portugal for 5 days... a long time ago.
- Lorin 4y agoHad a similar issue with Prime Video - it kept displaying only Indian suggestions even though I only visited India for a short time. I don't remember how I corrected it.
- cupofpython 4y agohaving worked in the data industry, this sounds about right. Digital fingerprinting is certainly real, but I was way more paranoid about what I thought companies knew about me before working in the industry. the data quality across the board is dogshit. Even for the best companies doing B2B data like D&B and Zoominfo which are talked about as being better than most of the others - it's still mostly dirt. Data right now is typically bought and sold with an expectation that most of it is crap. it's faster to buy and process 5000 dirty items that probably has a few good leads buried within it than to find leads manually / naturally or broadcast random advertising. (I left the industry in 2020 and my NDA expired in 2021) Data quality is typically assessed at the "Does this data field have a value for this line item" level. That means data vendors are financially incentivized to make shit up about you as much as they can get away with. think about it for a second, these companies are selling themselves as the source of truth. the actual accuracy does not matter, and the better you are then the less data your customers buy. the data goes stale faster than the accuracy of the data becomes relevant Did you like a post about a fresh baked baguette that had #french as one of the 100 tags associated with it? congrats, you're french now. it's not exactly this ridiculous, but you get my point
- tehbeard 4y agoIt's gonna be fun when this happens to Microsoft. They recently (early this year) onboarded a few million kids with the Minecraft account migration, and a lot of those new accounts will have flagged as "suspicious activity" and demanded a mobile number to verify who they are..
- ArrayBoundCheck 4y agoSome days I wish I could go without a phone number and have all my communications through an open protocol
- jmprspret 4y agoI have wanted to create a twitter a few times now, but they refuse to let me use my account/complete my signup until I give them my phone number.
- brailsafe 4y agoI've also wanted to join Twitter a few times now, but every time I visit, they quickly let me forget what that reason might have been
- bergenty 4y agoI just have a physical burner phone for all this nonsense. Costs like $15 bucks and totally worth the tiny investment.
- deleted 4y ago[deleted]
- deleted 4y ago[deleted]
- klabb3 4y ago> To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account. I had to look up whether this was actually official communication, since it sounds like a kafkaesque fever dream, but yes it's real. Tech CO's have been doing everything in their power to get your number and email, used it for advertising, and deliberately disabled non-regular phone numbers. And now suddenly you're being gaslit that it's your fault for complying with their demands. The cream of the cake is the vague "if your phone number is publicly known" stuff. Well yeah, every single phone number is publicly known because it's enumerable. Even if it weren't, almost everyone's number is harvested and resold by gray-market data brokers. Sounds like they want to muddy the waters and make it sound like a targeted vulnerability when in reality it is indiscriminate.
- hot_gril 4y agoAlso, you can't really use Twitter with just an email. Sooner or later, anti-bot misidentifies you, locks you out, and asks you to "verify" by entering a phone number.