2 ms·

Good to know. I refuse to let a bunch of things touch my phone (Discord doesn't exactly have a stellar privacy record), so have never tried, but for those that

Good to know. I refuse to let a bunch of things touch my phone (Discord doesn't exactly have a stellar privacy record), so have never tried, but for those that don't care so much about privacy, it sounds reasonable. But hopefully you can at least understand how unnecessarily convoluted Discord makes the process if you don't have or want to use a phone.

seanhunter 3y ago
So if you choose not to do the thing that is designed to make the process simple then the process is exactly the same as it is for me on just about any other site/system when I log in on an untrusted device. I don't really see it as unnecessarily convoluted, but even if it was, you inflicted that on yourself did you not? I care a lot about privacy and for me personally, logging in to discord on my own phone in order to log in on seamlessly on an untrusted device seems less bad than logging in to some arbitrary system using my actual creds. The latter combines any threat from discord with threats from password sniffing either while I'm getting creds to the device or on the device itself.
- RaisingSpear 3y ago
  > the process is exactly the same as it is for me on just about any other site/system when I log in on an untrusted device This is not my experience. Logging into Reddit/Twitter/Hacker News etc is nowhere near that level of convoluted. > you inflicted that on yourself did you not? That's like stating that an assault victim is inflicting damage on themselves by choosing not to comply with their assailant. Okay, perhaps not the best analogy, but hopefully you get the point. But no, I don't want to login at all. However Discord decided that I must, if I want to access info, and Discord imposed this procedure onto me, unless I comply with their (what I consider to be unreasonable) dance.
  - seanhunter 3y ago
    I don't buy your analogy as being at all equivalent. You literally had two choices, chose the hard option and then complained that it was hard. I totally understand making a tradeoff if you think that it preserves privacy (which I don't agree with as I explained above) but I don't think it's reasonable to do that and then complain about it.
    - RaisingSpear 3y ago
      > but I don't think it's reasonable to do that and then complain about it. "Entry into this establishment requires an exorbitant 20 minute procedure, or you can bypass that by showing nudie pics of yourself." Me: why do I have to go through this 20 minute procedure? You: you don't. I understand that not everyone is comfortable with showing nudie pics, but I don't think it's reasonable to complain about the alternative. Sorry, hard disagree with you, but I see that you're set on your opinion, and I'm set on mine, so let's just leave it at that.
    - lapinot 3y ago
      They chose the option that did not imply sharing too much information with discord. The fact that it's hard is mainly because it's not discord's preferred option. So no, it's a perfectly valid choice to make and discord is being a pita. Setting up time-based 2FA is simple. Setting up network (!! email !!) based 2FA is stupid and cumbersome.

seanhunter 3y ago

So if you choose not to do the thing that is designed to make the process simple then the process is exactly the same as it is for me on just about any other site/system when I log in on an untrusted device. I don't really see it as unnecessarily convoluted, but even if it was, you inflicted that on yourself did you not? I care a lot about privacy and for me personally, logging in to discord on my own phone in order to log in on seamlessly on an untrusted device seems less bad than logging in to some arbitrary system using my actual creds. The latter combines any threat from discord with threats from password sniffing either while I'm getting creds to the device or on the device itself.

RaisingSpear 3y ago
> the process is exactly the same as it is for me on just about any other site/system when I log in on an untrusted device This is not my experience. Logging into Reddit/Twitter/Hacker News etc is nowhere near that level of convoluted. > you inflicted that on yourself did you not? That's like stating that an assault victim is inflicting damage on themselves by choosing not to comply with their assailant. Okay, perhaps not the best analogy, but hopefully you get the point. But no, I don't want to login at all. However Discord decided that I must, if I want to access info, and Discord imposed this procedure onto me, unless I comply with their (what I consider to be unreasonable) dance.
- seanhunter 3y ago
  I don't buy your analogy as being at all equivalent. You literally had two choices, chose the hard option and then complained that it was hard. I totally understand making a tradeoff if you think that it preserves privacy (which I don't agree with as I explained above) but I don't think it's reasonable to do that and then complain about it.
  - RaisingSpear 3y ago
    > but I don't think it's reasonable to do that and then complain about it. "Entry into this establishment requires an exorbitant 20 minute procedure, or you can bypass that by showing nudie pics of yourself." Me: why do I have to go through this 20 minute procedure? You: you don't. I understand that not everyone is comfortable with showing nudie pics, but I don't think it's reasonable to complain about the alternative. Sorry, hard disagree with you, but I see that you're set on your opinion, and I'm set on mine, so let's just leave it at that.
  - lapinot 3y ago
    They chose the option that did not imply sharing too much information with discord. The fact that it's hard is mainly because it's not discord's preferred option. So no, it's a perfectly valid choice to make and discord is being a pita. Setting up time-based 2FA is simple. Setting up network (!! email !!) based 2FA is stupid and cumbersome.