2025-10-09 06:01 UTC
I will never stop beating the "2fa is security theater" drum.
Nowadays companies just get their Juicy User Info database directly stolen, and password security / 2fa is relatively unimportant for the end user.
The push to get end users onto 2fa (let alone shit like PassKeys) without also levying criminal penalties on corporations that leak their database, is akin to putting water restrictions on households while not regulating big industrial water users. A complete fucking disgrace.
https://www.theverge.com/news/797051/discord-government-ids-leaked-data-breach
Replies (1)
-
@psf@oldbytes.space 2026-07-12 05:29
2fa doesn't help if the service you're using gets its password database leaked Disk encryption doesn't help if your OS rats you out The problem is less whether individuals follow "security best practices" and more whether corpos can be trusted one iota (spoiler warning they cannot) https://www.windowslatest.com/2026/07/10/you-cant-fully-disable-microsofts-gdid-windows-11-tracker-but-these-settings-limit-what-it-captures/