4 ms·
Not that this is of help to you now, but my own controversial take is, avoid any services that push 2FA. Especially if they do so aggressively. This includes t
by tpoacher 4y ago
Not that this is of help to you now, but my own controversial take is, avoid any services that push 2FA. Especially if they do so aggressively.
This includes things like switching from github to sourcehut for me (though MS+copilot didnt help either)
For services where you cant avoid it (e.g. your company email), download a local OTP app, effectively converting back to 1FA, for each device you use to access that service.
2FA is a cancer and needs to die. Mandatory-phone-based 2FA doubly so. The only thing mandatory phone 2FA has done for me is it gives websites an excuse to make a phone a "necessary" field, so now I get spam/scam on my phone as well as my email.
- ASalazarMX 4y agoOne of the best ways to rob someone of their non-2FA account, is to find their password, and then activate 2FA on an attacker's device. 2FA makes your credentials more secure, specially when you use standards so it can be integrated with third-party apps, like authenticators or password managers. I completely agree about the phone authentication, it's bullshit meant to get your phone number in your profile. SMS is obsolete as a security measure.
- ProllyInfamous 4y agoI have closed two bank accounts, both because they required 2FA (I do not use a phone).
- q-base 4y agoWhat is the inherent issue with 2FA? I see the point about phone-number - that is absolutely valid. But if you could I would like to have a few more details about categorizing 2FA as cancer in general?