Current Events > 2FA fucking sucks

(+) Yeah! (+)

I have a spare email I just keep for shits n giggles

But if you want to log into it, Google gets all fucking antsy because "Oh we don't recognize your device, pls gibe us a phone number so we can text you" regardless of if you were to want to tie it to said phone number or availability of a phone number to receive said bull fucking code.

Can't just have standalone emails anymore, every mother bull fucked thing be goddamned connected to something traceable to you

"also you need another goddamn app for this, because we can't be arsed to send a simple text"

Outlook still does throwaway emails

*delete cookies on browser close*
*have to enter a code every single time I log in to watch a Twitch stream*

this is not fun

Google wants you to be on the same internet connection as the device you're using now if you're logging into a different device too. It's really inconvenient. Like, I already have 2FA enabled with my phone number and a spare email. Why do I need yet another step.

I hate that if I want to feel secure I need a totally different password for like 800 accounts now

littlebro07 posted...

I hate that if I want to feel secure I need a totally different password for like 800 accounts now

use a password manager like Dashlane.

Questionmarktarius posted...

"also you need another goddamn app for this, because we can't be arsed to send a simple text"

sms isnt that secure these days tbh

https://www.techrepublic.com/article/top-5-reasons-not-to-use-sms-for-multi-factor-authentication/

littlebro07 posted...

I hate that if I want to feel secure I need a totally different password for like 800 accounts now

I'm nearly at the point where I'm just gonna stick all my passwords into a .txt document >_>

SHRlKE posted...

sms isnt that secure these days tbh

It never was.

The whole point is "a thing you know" and "a thing you have". Anyone spoofing both deserves to hack whatever it is, and the alleged "secure" authenticator apps probably aren't either.

Anything is open to social-engineering phising anyway.

Questionmarktarius posted...

It never was.

The whole point is "a thing you know" and "a thing you have". Anyone spoofing both deserves to hack whatever it is, and the alleged "secure" authenticator apps probably aren't either.

Anything is open to social-engineering phising anyway.

sms is less secure than other methods might be better phrasing on my part

I have not had any issues, though I always keep a back up phone and use Authy when possible, coupled with Bitwarden for unique passwords.

SHRlKE posted...

sms is less secure than other methods might be better phrasing on my part

fair

Yeah the worst ones are those that require some bs smartphone app, like Steam Guard (needed for item trading)

I ain't got a smart phone bitch why is my email less secure than a smartphone anyway.

I hate the authenticator app some websites use. Absolutely awful.

Give me regular 2fa so i can use my phone number

2FA is great..... depending on the type. I don't want some guy in Russia trying to log in to my account at my company and me not having some sort of protection against that.

i use 1password as my 2fa. just autofills any 2FA code in most places 80% of the time

2fa is great as well. its a little annoying but if you even slightly care about an account whatsoever its better to protect it. get outta here with that dumb ass shit "they deserve to hack you lol"

the ones that actually suck are ones that dont implement standard mfa. looking at you, steam and blizzard. although blizzard kinda gets an excuse since they were a pioneer of MFA back with physical authenticator dongles

Don't use it then, I just get an alert if there's suspicious activity or log in from another device but I can still proceed.

2fa is annoying, but I can't deny that I've never had an account with 2fa get hacked.

Sexypwnstar posted...

Don't use it then, I just get an alert if there's suspicious activity or log in from another device but I can still proceed.

It forces me into receiving a verification code.

"Google, wants to make sure it's really you"

I'd say it's because I'm overseas but it did this to me in the States