905
These F-ing Logins Nowadays (lemmy.today)
submitted 1 day ago by to c/programmer_humor@programming.dev
217 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 23 hours ago (13 children)

yes I do. I will take convivence over security most days. Just because you don't, and you have good reasons to want it to stay, doesn't mean everyone comes to the same conclusion based on similar data.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] 16 points 23 hours ago

    Although I personally think 2FA is very important in most cases, I agree that mandatory 2FA is annoying. If you want to forego security for convenience, that should be up to you. I'm sure you're not stupid or ignorant of the risks.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 8 points 23 hours ago (5 children)

    As a user its annoying, as a developer it is incredibly frustrating and time consuming.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 3 points 18 hours ago

    as a developer it is incredibly frustrating and time consuming

    Huh? How? Implementing OTP (which I'm assuming most people here are talking about) is pretty trivial, and once you have it set up, it doesn't require much maintenance.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 23 hours ago (3 children)

    It fails for somebody every day, it adds a dependency for a known unreliable 3rd party that often mangles the identification data it sends back, it is exploited by that 3rd party for extending their monopoly, and it gives that 3rd party (or any hacker that got access to them) full access to impersonate any user it wants.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 14 points 23 hours ago (2 children)

    What?

    Implement TOTP and let your users use their preferred authenticator and none of what you're struggling with will apply.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 20 hours ago* (1 child)

    Oh, yeah, and of course there's someone on the internet talking about the MFA protocol that no corporation uses.

    That one is obligatory too.

    (Anyway, yes, if you need MFA, use TOTP. That's a non-brainier. Except that corporations don't have brains.)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 hour ago

    Amazon, Facebook, and many more support TOTP in whatever authenticator you want. I don't particularly like either of those websites but they are massive and directly contradict your claim that no corporation uses this normal method of 2FA.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 7 points 23 hours ago* (4 children)

    This is uterly idiotic but ok. I have decided I do not need to wear seat belt in the car. Just because you do and you have good reasons to want it to stay, doesn’t mean everyone comes to the same conclusion based on similar data.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 0 points 21 hours ago (3 children)

    there, now you are getting it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 22 hours ago (2 children)

    i dont want you not wearing the seatbelt, it is so easy to do

    we live in a society and im tired of paying for stupid doing stupid things

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •