3 ms·
Yeah, this seems like such an incredibly obvious oversight. Like... I know how it goes with fuzzy requirements, but who didn't nail down the acceptance criteria
by ryandvm 3y ago
Yeah, this seems like such an incredibly obvious oversight. Like... I know how it goes with fuzzy requirements, but who didn't nail down the acceptance criteria that the user should be able to trigger Find My Phone without 2FA.
- tiagod 3y agoIt's very common. I once lost a phone in an Uber car, and the only way to contact the driver was to log-in to Uber, which required SMS 2FA...
- daghamm 3y agoPlease don't. If you have 2FA, it should always be active. No exceptions. Hackers were able to steal private photos of half of Hollywood in 2014 because someone at Apple decided that 2FA is not needed for one particular iCloud function.
- IncreasePosts 3y agoSo if someone steals my password, they can now find out exactly where I am? And factory reset my device now. Perhaps some combination of no 2FA IF you are a trusted contact that I've specifically added to the account would be safer.
- gomox 3y agoThere are many design tradeoffs around this problem, and most of them are reasonable, except the one they chose (can't find your phone unless you have your phone). Especially since the choice of where the 2FA prompt will actually show up is out of your hands.