4 ms·
Twitter Disables 2FA in possibly botched effort to “reduce bloatware”
- minimaxir 4y agoMost likely not an intentional removal; several Twitter microservices have been broken since the massive org change. The images imply it's for SMS 2FA only, but per a reply to that tweet downloading a user's personal Twitter archive requires a SMS code.
- fzeroracer 4y agoIt seems intentional to me, since Musk just mentioned shuttering unnecessary microservices and nothing is worse than a supposed know-it-all deciding they know how to mess with critical infrastructure in prod.
- anikom15 4y agoIf any other website disabled SMS 2FA HN would drown it in praise.
- sschueller 4y agoNot if they do it like this. Things like this need a phase out and guidance for those that need to migrate.
- BulgarianIdiot 4y agoIt's not intentional, but it's what happens when you decide 80% of microservices do nothing and turn them off.
- i13e 4y agoIs this only for SMS 2FA or can they no longer verify OTP codes from an app like Google Authenticator or Authy as well?
- PuppyTailWags 4y agoSMS.
- sosodev 4y agoIs anybody else highly skeptical that 80% of Twitters services do nothing? Even trivial services do something and tracking down all of the dependencies seems very hard
- TheLoafOfBread 4y agoEveryone who was working on any commercial codebase knows that this functionality are either features which nobody knows they are there, but when they disappear all the hell will break loose, because there is non-trivial amount of people using them and other thing on seemingly "dead code" is covering of edge cases for bugs which developer is unable to trigger, but end user will trigger them with 100% success rate.
- torben-friis 4y agoI’m assuming they have some sort of tiered architecture with graceful degradation functionality, he’s heard somewhere that “the system can provide basic service with as little as X important services running”, and has decided to shut down the rest.