2024-03-21 18:39 UTC
The war on password login is tiresome. "Security best practices" often do not take into account the security/convenience trade, especially when the account in question is low value or already protected by a strong security boundary.
Replies (1)
-
@psf@oldbytes.space 2025-10-09 06:01
I will never stop beating the "2fa is security theater" drum. Nowadays companies just get their Juicy User Info database directly stolen, and password security / 2fa is relatively unimportant for the end user. The push to get end users onto 2fa (let alone shit like PassKeys) without also levying criminal penalties on corporations that leak their database, is akin to putting water restrictions on households while not regulating big industrial water users. A complete fucking disgrace. https://www.theverge.com/news/797051/discord-government-ids-leaked-data-breach