3 ms·

“My cofounder needed me to 2FA our Stripe login and I couldn’t” I’m guessing the issue was that the request to 2FA was sent to the founder’s phone and thus the

by fwlr 4y ago

“My cofounder needed me to 2FA our Stripe login and I couldn’t” I’m guessing the issue was that the request to 2FA was sent to the founder’s phone and thus they didn’t see it. It would take some testing but perhaps it’s possible to take advantage of Do Not Disturb and other similar features on modern phones to upgrade a phone check with the ability to notice when there’s something important and go fetch the phone’s owner. I’ve always wanted an Apple Watch in the hopes that I could set it up to be a low-information zero-interaction way of letting me know when I need to look at my phone, but it has always seemed like Apple Watches are designed to be mini-phones and just as distracting. Maybe there’s a way, though.

paxys 4y ago
This is more or less already possible. You can create a focus mode that only lets certain critical apps through. Of course the bigger problem is having the discipline to keep it on and not randomly pull out your phone anyways. And Apple (or anyone else) cannot fix that part.
- fwlr 4y ago
  I experimented with focus modes a while back and found them lacking. Does what it says on tin but I guess I was after Do What I Mean, i.e. I wanted my phone to figure out what was important for me. Maybe I’ll revisit them!
snowwrestler 4y ago
This is somewhat off topic, but in general one should turn off all alerts related to 2FA. If you’re logging in, you’ll obviously know to go looking for it. If you’re not logging in, you don’t want to get tempted or fooled into approving access when you shouldn’t. Buzzing someone’s phone incessantly with alerts is a known social engineering tactic for breaking 2FA.
scoot 4y ago
I was also confused by this. Stripe (as do many other services) allows multiple individual accounts with unique credentials to access the same "parent" account or service. If these guys were sharing a single account, I have to question how they ever got into YC, as that isn't remotely tech savy. (Yes, some service make credential sharing an unfortunate inconvenient and insecure reality – but not Stripe.)

by fwlr 4y ago

paxys 4y ago

This is more or less already possible. You can create a focus mode that only lets certain critical apps through. Of course the bigger problem is having the discipline to keep it on and not randomly pull out your phone anyways. And Apple (or anyone else) cannot fix that part.

fwlr 4y ago
I experimented with focus modes a while back and found them lacking. Does what it says on tin but I guess I was after Do What I Mean, i.e. I wanted my phone to figure out what was important for me. Maybe I’ll revisit them!

snowwrestler 4y ago

This is somewhat off topic, but in general one should turn off all alerts related to 2FA. If you’re logging in, you’ll obviously know to go looking for it. If you’re not logging in, you don’t want to get tempted or fooled into approving access when you shouldn’t. Buzzing someone’s phone incessantly with alerts is a known social engineering tactic for breaking 2FA.

scoot 4y ago

I was also confused by this. Stripe (as do many other services) allows multiple individual accounts with unique credentials to access the same "parent" account or service. If these guys were sharing a single account, I have to question how they ever got into YC, as that isn't remotely tech savy. (Yes, some service make credential sharing an unfortunate inconvenient and insecure reality – but not Stripe.)