4 ms·
Of course I understand enforcing 2FA when the user has signed up for/opted in to 2FA. But that doesn’t seem to be what’s happening here: Google unilaterally dec
by evouga 4y ago
Of course I understand enforcing 2FA when the user has signed up for/opted in to 2FA. But that doesn’t seem to be what’s happening here: Google unilaterally decided to enforce 2FA on a 1FA account.
- cuteboy19 4y ago"Old password+new password" is not 2fa
- awinter-py 4y agoyes exactly. if G were following best practices from the consumer banking industry, 2fa would be more like 'old password + random row from your equifax profile'
- cuteboy19 4y agoAnd of course, the last 4 digits of your ssn
- awinter-py 4y ago'any digit from your ssn'
- jacob019 4y agoI would rather not have to live in a world where google uses my credit profile for authentication.