|
| ▲ | mrguyorama 2 days ago | parent | next [-] |
| Google actually puts effort into security for "normal" people who don't want to earn a PhD in cryptography just to have a damn free email account or watch Mr. Beast That's why they had powerful and effective account takeover protection even 15 years ago. The kind that will prevent the hacker from taking over your account even though they got access to all your factors, because it shouldn't take expertise to know that if you logged in from Oregon twenty minutes ago, you definitely aren't also logging in from Ecuador. Which of course makes it all the more stupid that your credit card company, all your medical service providers, and Facebook don't meet that absurdly low bar. Facebook will happily hand control to the scammer in Laos who got one of your factors and somehow that gave them access to change your password and recovery email |
| |
| ▲ | Dylan16807 2 days ago | parent [-] | | The best backup method doesn't need any computer knowledge, it's writing down or printing a few passwords and putting that piece of paper in the same box as your taxes or birth certificate. |
|
|
| ▲ | cwillu 2 days ago | parent | prev | next [-] |
| A required “more secure” method is less secure if it means you can be locked out by not-exactly-uncommon real-life situations. Denial of service is a security issue. |
| |
| ▲ | hedora 2 days ago | parent | next [-] | | I’ve repeated it a hundred times security = confidentiality, integrity and availability. One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity. | | |
| ▲ | jwr 2 days ago | parent [-] | | > One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity. Is this true? If so, in what countries? (Poland has no Apple stores, for example, for inexplicable reasons Apple has been giving the middle finger to this market) That would be a huge difference. |
| |
| ▲ | kaycey2022 19 hours ago | parent | prev [-] | | I think Google’s own textbook on SRE has an example in its very first chapter where everyone gets locked out of their bus fleet WiFi thanks to their secure system reaching an unforeseen state |
|
|
| ▲ | john_strinlai 2 days ago | parent | prev [-] |
| yes, i understand. i was asking specifically whether google has sms recovery flow, not how secure sms recovery flow is compared to other options. |
