5 ms·

Your paranoia is getting out of hand, seriously. 2FA here, OTP there. Idk about you, maybe you do have such sensitive data that you have to double guard everyt

Your paranoia is getting out of hand, seriously. 2FA here, OTP there. Idk about you, maybe you do have such sensitive data that you have to double guard everything, I and the usual average guy doesn't. Why do I care? Because this craze has already reached the real world. Amazon requiring 2FA on deliveries. Wtf is wrong with my passport or other document? Nothing. Now I have to be physically present and recite some fucking code they sent my via fucking email or app if installed. I can't log in anywhere anymore without having to double prove that the password and email is indeed mine. STOP THIS MADNESS ALREADY!

ioseph 4y ago
My work recently changed the password length requirement to 16 characters, 2FA now requires typing in a number and you automatically get deauthenticated every 12 hours. I really feel there's got to be diminishing returns for such policies
manmal 4y ago
I really hope PassKeys will be implemented everywhere soon.
wink 4y ago
My World of Warcraft account had been secured by 2FA 10y earlier than my bank account. The good thing is, the launcher app on _my_ PC got the feature (a few years ago) that I only need to use the actual 2FA fob once every few months, not every time I login. It protects me against the most common case (someone logging in with my account/stealing my account) while not getting in the way at all. Unless someone breaks into the apartment, but I'll take that risk. Still wondering what's wrong with most orgs not even offering the user the choice of "no 2fa/2fa everytime/whitelist this one device for $period".
- bombcar 4y ago
  The whitelisting is really nice, and it's expanding more and more. I like "login once per device".
ryokeken 4y ago
where does amazon requires 2fa for deliveries or be present for it? in nj/ny doesn't seem to happen
- aranelsurion 4y ago
  in Germany they do, but afaict usually only for expensive packages.
aranelsurion 4y ago
> Amazon requiring 2FA on deliveries. That's probably not about information security, it's simply Amazon not trusting the gig economy delivery worker enough with an expensive package, so they give you a number only you know and he doesn't, and that's how they verify that he has to interact with you before marking the delivery as done. It's to prevent a common kind of theft. (I'm not talking out of any inside knowledge on the process, just thought that'd be the reason)

ioseph 4y ago

My work recently changed the password length requirement to 16 characters, 2FA now requires typing in a number and you automatically get deauthenticated every 12 hours. I really feel there's got to be diminishing returns for such policies

manmal 4y ago

I really hope PassKeys will be implemented everywhere soon.

wink 4y ago

My World of Warcraft account had been secured by 2FA 10y earlier than my bank account. The good thing is, the launcher app on _my_ PC got the feature (a few years ago) that I only need to use the actual 2FA fob once every few months, not every time I login. It protects me against the most common case (someone logging in with my account/stealing my account) while not getting in the way at all. Unless someone breaks into the apartment, but I'll take that risk. Still wondering what's wrong with most orgs not even offering the user the choice of "no 2fa/2fa everytime/whitelist this one device for $period".

bombcar 4y ago
The whitelisting is really nice, and it's expanding more and more. I like "login once per device".

ryokeken 4y ago

where does amazon requires 2fa for deliveries or be present for it? in nj/ny doesn't seem to happen

aranelsurion 4y ago
in Germany they do, but afaict usually only for expensive packages.

aranelsurion 4y ago

> Amazon requiring 2FA on deliveries. That's probably not about information security, it's simply Amazon not trusting the gig economy delivery worker enough with an expensive package, so they give you a number only you know and he doesn't, and that's how they verify that he has to interact with you before marking the delivery as done. It's to prevent a common kind of theft. (I'm not talking out of any inside knowledge on the process, just thought that'd be the reason)