g8phcon2 comments on These F-ing Logins Nowadays

[–] g8phcon2@k.fe.derate.me 8 points 23 hours ago (5 children)

As a user its annoying, as a developer it is incredibly frustrating and time consuming.

permalink

fedilink

source

parent

hideshow 5 child comments

[–] Ghoelian@piefed.social 3 points 18 hours ago

as a developer it is incredibly frustrating and time consuming

Huh? How? Implementing OTP (which I'm assuming most people here are talking about) is pretty trivial, and once you have it set up, it doesn't require much maintenance.

permalink

fedilink

source

parent

[–] marcos@lemmy.world 3 points 23 hours ago (3 children)

It fails for somebody every day, it adds a dependency for a known unreliable 3rd party that often mangles the identification data it sends back, it is exploited by that 3rd party for extending their monopoly, and it gives that 3rd party (or any hacker that got access to them) full access to impersonate any user it wants.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] andyburke@kbin.earth 14 points 23 hours ago (2 children)

What?

Implement TOTP and let your users use their preferred authenticator and none of what you're struggling with will apply.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] marcos@lemmy.world 1 point 20 hours ago* (1 child)

Oh, yeah, and of course there's someone on the internet talking about the MFA protocol that no corporation uses.

That one is obligatory too.

(Anyway, yes, if you need MFA, use TOTP. That's a non-brainier. Except that corporations don't have brains.)

permalink

fedilink

source

parent

hideshow 1 child comment

[–] andyburke@kbin.earth 1 point 1 hour ago

Amazon, Facebook, and many more support TOTP in whatever authenticator you want. I don't particularly like either of those websites but they are massive and directly contradict your claim that no corporation uses this normal method of 2FA.

permalink

fedilink

source

parent