Oh you want the code not rendered into html!
Drops the code in javascript when it is received from the backend.

Imagine breaking someone's scraper with that change.

I counted the boxes 3 times. :(

The "secret" code sent to your phone is spelled out in the text

No point sending the code to your phone when it's displayed right there. The idea of doing this is making sure nobody has stolen your password, because they still need access to your phone before they can access your account.

Agreed, they're getting off light. I've worked with people who felt the code, but werent always able to communicate their ideas. I'd say theyd fit the idea of vibe coding without ai.

The concept is taken, and doesn't describe the intent well. How about "pseudocoders".

"vibe coding" was supposed to be derogatory?

mission failed successfully

I'll be homest with you, some people really struggle with email 2fa. The amount of working Americans I have spoken with who don't understand how to have two tabs open at once is genuinely frightening.

As a reset method it's worse than having nothing

Even with autofilling it on iOS, macOS you still have developers that need to fuck with form fields using JavaScript because they think they’re smarter than you.

App based 2FA is better. Either the app generates a time based code that you enter into the site or the site sends a push notification to the app asking you to verify the login attempt.

Passkeys are good too as they replace the password completely and leave the 2FA part to the device.

TOTP, FIDO2 or not worrying about logins and just using {GitHub,Google,Microsoft,selfhosted.lan} as identity provider with OIDC

I figured it out immediately. I came here to say that.

vs

Everyone has a test environment. Some are just lucky enough to have a separate production environment.

It's the only way to fly.

If they have one.

O saved the ass of the company I worked for at software QA multiple times 🤭

Most of the time, it was just miscommunication between decision makers and devs and I had to explain to both why it is not working how it is now and that none of them is clearly to blame for the situation.

I still work for that company, but manage IT infrastructure now, but I am confident that my successor will still do good job, than unlike me, he has a proper education in programming, 😂 I was literally in vibe code state

(Thank you AI)

Nitpicking words like this makes me psich

It's ok I'm oot of academia.