3 ms·

“What happens if I lose my second factor” is a real problem, but another second factor is probably a better solution than stored recovery tokens. What happens

“What happens if I lose my second factor” is a real problem, but another second factor is probably a better solution than stored recovery tokens. What happens if I forget my password? is the same problem, using your email inbox as a somewhat-secure second factor.

nomilk 3y ago
A damaged or lost 2FA device is less in the control of a cautious and competent user, relative to forgetting a password. Example: taking an Alaska Airlines flight wouldn't typically be considered an account lockout hazard, but this week it was.
- aspenmayer 3y ago
  > Example: taking an Alaska Airlines flight wouldn't typically be considered an account lockout hazard, but this week it was. Context?
  - nomilk 3y ago
    Passengers’ phones were sucked out when a door fell off mid-flight!
    - aspenmayer 3y ago
      Ah, I see. I’m wondering why they mentioned Alaska Airlines when it’s more a Boeing 767 Max issue, hence my confusion.
      - Izkata 3y ago
        A lot of the reporting is using Alaska Airlines, because it was their flight. Also here's one that says "Alaska Airlines MAX 9": https://www.seattletimes.com/business/boeing-aerospace/boeing-is-under-fire-after-alaska-airlines-max-9-blowout-so-is-the-faa/ https://www.seattletimes.com/business/boeing-aerospace/boein...
        aspenmayer 3y ago
        > A lot of the reporting is using Alaska Airlines, because it was their flight. I don’t disagree, it just wasn’t obvious - to me - what was being referred to originally. I think it’s because lexically/conceptually I don’t associate the issue with any particular airline, as it seems the through line is that they are specifically Boeing planes of a certain series with these issues, and not due to any particular airline or servicing or lack thereof, but rather, a defect in the original design as specified and/or a flaw or oversight in production. Considering the frequency and impact of the issues, I’m inclined to believe it’s a bit of both.
- Ferret7446 3y ago
  Not really? If a Yubikey in your pocket gets sucked out of a flying plane, you have no problems because you are no longer on the mortal plane.
  - Izkata 3y ago
    Apparently peoples' phones flew out of their hands when that happened, which is where most people are keeping their second factor.

nomilk 3y ago

A damaged or lost 2FA device is less in the control of a cautious and competent user, relative to forgetting a password. Example: taking an Alaska Airlines flight wouldn't typically be considered an account lockout hazard, but this week it was.

aspenmayer 3y ago
> Example: taking an Alaska Airlines flight wouldn't typically be considered an account lockout hazard, but this week it was. Context?
- nomilk 3y ago
  Passengers’ phones were sucked out when a door fell off mid-flight!
  - aspenmayer 3y ago
    Ah, I see. I’m wondering why they mentioned Alaska Airlines when it’s more a Boeing 767 Max issue, hence my confusion.
    - Izkata 3y ago
      A lot of the reporting is using Alaska Airlines, because it was their flight. Also here's one that says "Alaska Airlines MAX 9": https://www.seattletimes.com/business/boeing-aerospace/boeing-is-under-fire-after-alaska-airlines-max-9-blowout-so-is-the-faa/ https://www.seattletimes.com/business/boeing-aerospace/boein...
      - aspenmayer 3y ago
        > A lot of the reporting is using Alaska Airlines, because it was their flight. I don’t disagree, it just wasn’t obvious - to me - what was being referred to originally. I think it’s because lexically/conceptually I don’t associate the issue with any particular airline, as it seems the through line is that they are specifically Boeing planes of a certain series with these issues, and not due to any particular airline or servicing or lack thereof, but rather, a defect in the original design as specified and/or a flaw or oversight in production. Considering the frequency and impact of the issues, I’m inclined to believe it’s a bit of both.
Ferret7446 3y ago
Not really? If a Yubikey in your pocket gets sucked out of a flying plane, you have no problems because you are no longer on the mortal plane.
- Izkata 3y ago
  Apparently peoples' phones flew out of their hands when that happened, which is where most people are keeping their second factor.