4 ms·
> I don't want to go through onerous, incompetent, poorly designed account recovery procedures if a toddler smashes my phone Why don't you use the printed reco
by itake 3y ago
> I don't want to go through onerous, incompetent, poorly designed account recovery procedures if a toddler smashes my phone
Why don't you use the printed recovery tokens?
- monocasa 3y agoWho has a printer these days?
- CameronNemo 3y agoLocal libraries, print shops... but yeah that may be an attack vector.
- unethical_ban 3y agoNot all websites offer them. Hell, no bank I use (several large and several regional) support generic totp. Some have sms, one has Symantec VIP, proprietary and not redundant. Edit: since I'm posting too fast according to HN, even though I haven't posted in an hour, I'll say it here. Symantec is totp but You cannot back up your secrets and you cannot have backup codes.
- CameronNemo 3y agoSymantec VIP is TOTP under the hood. https://github.com/dlenski/python-vipaccess https://github.com/dlenski/python-vipaccess
- Zarathustra30 3y agoThe toddler got there first. Seriously, though, it's hard to keep track of something that gets used once every five years.
- e12e 3y ago> Why don't you use the printed recovery tokens? I currently see 53 2fa tokens in my private bitwarden. You expect me to print, keep safe and manually reset them all when I buy a new phone?