4 ms·
Addressing the issue is sensible, and yet he found the least sensible way to do it. Putting the onus on the user to remove sms two factor and making worse secur
by sumeno 4y ago
Addressing the issue is sensible, and yet he found the least sensible way to do it. Putting the onus on the user to remove sms two factor and making worse security a paid feature is just absurd.
- pcthrowaway 4y agoIt's not clear to me if Twitter offers other types of 2FA like TOTP. I don't use it. What do you think the solution is here though? If someone is using a company that's scamming twitter, it's not their responsibility to continue being scammed so they can support SMS 2FA for that user.
- ceejayoz 4y agoThey do, thankfully, support TOTP and U2F keys (and multiple of them).
- sumeno 4y agoA reasonable solution would be to disable the ability to add SMS 2FA to accounts and require either disabling 2FA or selecting a different 2FA method upon next login. If specific accounts with SMS 2FA manage to abuse it after that then ban those accounts, since you can't add SMS 2FA to a new account that removes their avenue for abuse.
- lupire 4y agoTwitter doesn't deserve to be help hostage by users using a fraudulent Telco.