“I hate 2FA” - people who don’t understand 2FA
i declare security!
I understand 2fa, but the way many companies have implemented it is such a shit implementation that it’s nothing more than security theater designed to purposely make my life difficult, but not actually secure anything. Anything to do with medical stuff seems to be particularly bad. And OMG, don’t get me started on the shit they put behind 2fa for no reason other than fuck with you. Why do I need to log in so I can see some completely public information? Just so they can track me… Ok, I will fucking log in then… And it’s behind 2fa… And because they don’t give a fuck the 2fa server never sends 2fa verification.
So, I think 2fa is technically a great idea and the way to go, but at the same time, I fucking hate 2fa.
“Someone decided our current authentication wasn’t trusted enough so we’re adding 2FA to this system. We now need to you give us information we didn’t already have over this untrusted mechanism, which we will then trust because it’s convenient for us.”
Okay, fair enough, hating on shitty 2FA is something I can get behind. Like,whatever the fuck Paypal is doing, funfact: Customer support can just turn it off.
To connect to my work VPN I have to enter my userid and password on the PC (that I’m already signed into with the same) then unlock my phone, and then open the app, enter the # shown on my PC, then enter my pin on my phone again. Then half the time the connection fails and I have to do it all again. Why it can’t skip the second pin because I JUST FUCKING USED IT TO UNLOCK MY PHONE I don’t know. Then if I want to use teams on my phone I have to use my pin again then I have to also use it to get into outlook, repeatedly all day. Microsoft products are garbage.
To that point: it’s 2 factor authentication. That is, proving who you are through 2 different factors, usually something you know (a password) + something you have (a physical device) or something you are (biometrics).
The point is that “something you know” can often be easily acquired by malicious third parties and it is generally much harder for them to gain access to “something you have” or “something you are”. Thus requiring 2 different factors blocks most nefarious access attempts.Authorization is a separate, different step that, usually after having already proven you are who you say you are, verifies whether you’re allowed to do what you’re trying to do. This generally doesn’t require multiple factors because you’ve got nothing left to prove: the system knows all about what you’re permitted to do.
Mnemonic:
- authentication: you are an authentic person (as opposed to impersonating someone)
- authorization: you are authorized to perform an action
I hate email or SMS 2FA. But 2FA codes are awesome (and passkeys)
It’s possible to understand 2FA, be all for the extra security it can provide, and wanting it enabled for important logins. And at the same time hate it for how annoying it can be.
And that’s even not getting into the poorly designed and implemented 2FA systems, many of which end up not actually providing any extra security.
How do you come to that notion?
Mine doesn’t even say “Teams” anymore in the taskbar. Just has the Teams logo and says Copilot no matter what I do. Along with 9+ notifications icon, even though I have no notifications. It has been 2 months like this.
I use Arch btw
👍
Elon …
Oh wait, that’s how it actually works.
tried to watch death note again somewhat recently and having achieved some measure of class consciousness it does not hold up. light is such an irredeemable naive little capitalist boot licker. all he does is kill criminals, then spends the rest of the series in that ridiculous cat and mouse game he could have avoided by just ignoring it. he never once considers trying to undermine the economic and political systems that push people to commit crime in the first place. like what if he was a japanese luigi? such a waste of an interesting story idea.
Did you think Light was the hero when you watched it the first time? He’s a teenage kid who suddenly gets way too much power, thoroughly abuses it, then starts killing innocents to avoid the consequences of his own actions. Even if his first few kills were literal supervillains, there is no justice in a world where Light decides who lives or dies.
Your idea of a revolutionary undermining the system is also an interesting story idea, but it’s a very different story idea.
It really is the anime Starship Troopers.
True, I think both take advantage of our inherent bias to pick the side of the main characters and then push and push into the dark side until you have to admit that maybe they are the bad guys after all. Catching onto it after 10 episodes or on the second viewing isn’t a fundamental difference in that regard.
Yeah, that story idea is V for Vendetta (the grapic novel more than the movie).
I only liked that show because of the power fantasy aspects. Looking back it’s cringe AF.
That’s kinda the point, Light is an ergonomical lunatic with a god complex who very early on starts killing more or less innocent people for the insult of getting in his way. He isn’t an anti-hero he is a sociopathic lunatic who if he was in a grimdark setting would be sitting next to Griffith and FUCKING Erebus. Hell he isn’t even all that complex since at least say Erin Yeager had the excuse of getting mind fucked and being put into a bad situation by himself, his ancestor, and the fact the world was genocidal to his people.
At least he’s reducing workplace repetitive stress injuries
I don’t get the joke.
ergonomical lunatic
Ya know I hate autocorrect with a fucken passion.
Well, he thinks criminals are such because they’re evil or something. He thinks the only way to stop them is by creating a totalitarian state where he is God and everyone does his bidding lest they invoke his ire.
The thin veil of “making the world a better place” was lifted super early in the series, when he started killing people that weren’t criminals, justifying it as “if they go against my plans they may as well be criminals”.
He was never supposed to be a good guy. He’s an arrogant piece of shit, and that’s why he got caught.
What?
It’s from a show called Death Note. A guy finds a book in which you enter the names of people you want dead, and then they die. It’s a pretty good show. Kind of a cat and mouse detective show almost, but with a supernatural twist.
HTML-ONLY EMAILS
Actual CSS support in outlook and gmail.
What’s wrong with 2FA?
If they’re also complaining about Teams, I’d venture to guess that they’re complaining about the near incomprehensible implementation within Microsoft Office ecosystem (and their web UIs).
I recently had an issue where Microsoft authenticator needed to sign back in to my work domain. After entering my username and password, it would trigger a push to authenticate on the app. Accepting the push would open the app, canceling the login workflow.
Passkeys
Digital ID verification requirements/laws
Chrome-only websites
Dell
Passkeys are actually goated tho
We’ll solve it with AI
Recaptcha
Trump
All of them
Definitely this would be me
It took me a while to realize he was writing 2fa in the hopes it would “die”, the first few times i saw this i presumed it was some kind of trick were the book was asking for another factor.
