Remix.run Logo
basch 2 hours ago

What if my phone is dead? Stolen?

In the same vein as 2fa, going up to a fresh computer and trying to log into anything is now a nightmare. Every service has a 2fa that somehow loops into another provider that also has 2fa.

And some 2fa, if not many, make accounts weaker. Apple's solution to get around 2fa is to put in SOMEBODY ELSES phone number that I trust, as a backdoor. It's an insane solution. And its normalized, and nobody questions it.

Terr_ 2 hours ago | parent [-]

While we're at it, the insanity of those "recovery questions", made even worse when many companies demand the same ones.

basch an hour ago | parent [-]

but you can type anything in the recovery box.

its just three additional passwords.

should you type the same brother name in each time? should you even answer with a name?

don't get me wrong, they were insane, but they can be repurposed.

samspot an hour ago | parent [-]

Good luck remembering what you put there when asked 10 years later.

Terr_ 40 minutes ago | parent [-]

Yeah, many do not even allow you to enter in a custom question, which would be marginally better--at least for users who care about security.

Then you'd have the option to craft a question which is (A) personally memorable (B) specifically phrased to avoid ambiguity, (C) not public or guessable, and (D) unique to a service.

* "Where is your first pet buried?"

* "While on vacation, The Noodle Incident happened in which city?"

* In what year did you first see Example Band live in concert along with Alice and Bob?"