3 ms·
> without clarifying the alternative factors This is super annoying. I wish sites would standardize on a simple infographic saying: You will be able to acc
by londons_explore 2y ago
> without clarifying the alternative factors
This is super annoying. I wish sites would standardize on a simple infographic saying:
You will be able to access your account with:
* Username, Password and 2FA device.
or
* 5 points from the following list: Username (1), Current password (2), old password (0.5), sms verification (1), mothers maiden name or other secret word (0.5). Email verification (2). 2 factor device (2), Video call with support agent showing government ID matching account name (1), has waited 7 days without successful login, despite notifying all contact addresses (2)
For added security, you can adjust the account to require 6, 7 or 8 points from the above list, but please be aware doing so might hinder your ability to access the account if you lose your password or 2FA device.
- throwaway48476 2y agoUnfortunately identity systems have adopted security through obscurity instead. They use IP address, location, time since last login, number of attempts, device etc to determine how easy to make it for you to log in. I lost a Gmail account because I no longer had an old phone number even though my password was correct.
- willis936 2y agoMaintaining a phone number is not security through obscurity.
- throwaway48476 2y agoThe obscurity is that you have no idea what is required to log in.
- inquirerGeneral 2y ago[dead]