Remix.run Logo
browningstreet 9 days ago

I just deleted my gofundme because they kicked me into this cycle today. Somehow I've managed to have an account there and make contributions over the years, but now they wanted my phone number and an MFA code to proceed, and there was no opt-out. I went through it but then deactivated my account. I need less of this in my life, and gofuneme is not essential to my life.

I'm in the rental market right now, and Zillow not only has a log-in for the app, but to read messages in your inbox, you have to MFA again each time, and the time-out period is about an hour.

We're being annoyed to death.

This is madness.

bsimpson 9 days ago | parent | next [-]

Ticketmaster did the same. They don't accept Google Voice numbers, yet my only number is Google Voice. The number tied to my SIM is an implementation detail that changes depending on where I am, but it's the only way I can get into that account now. My choices are to not go to events that are ticketed by them, or accept that I'll probably be locked out whenever I change SIMs.

cnst 7 days ago | parent [-]

SMS is literally the least secure form of authentication, because numbers expire after mere weeks, and get re-assigned shortly, within months, because of number shortage in many area codes.

Nothing like this could happen with any mainstream mail service like Gmail, where it's officially advertised that the accounts could never be reused.

The worst part about SMS is that not only is there the potential to be locked out permanently, but also you never know whether or not the service would allow login or password reset via SMS, thus, you never know if you're opening yourself to account takeover.

qingcharles 9 days ago | parent | prev [-]

Google turned on 2FA on my account themselves, but the phone number on the account is outdated, so I was permanently locked out.