News for hackers. Stuff that matters.
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by tptacek on Tuesday October 12, 2010 @09:10PM (#1785633)
Since they didn't call it two-factor authentication, it's not fair to whack them for not implementing two-factor authentication. It's "I'm at someone else's computer" authentication, and it's a fine idea.

Within the next 2 years, most everyone's phone will already be logged in to Facebook, as smartphones become as cheap as iPods, mooting the latter concern. Regardless, if you can't safely use the feature, you'd be well advised not to use it.

Re:More Ways to Stay Secure (Facebook introduces one-time pa... by Groxx on Tuesday October 12, 2010 @10:14PM (#1785778)
I remember claims that, by now a couple years ago, cell phones would cost $10 and the batteries would last for weeks.

My phone dies in 3 days if I have bluetooth on, and it cost $60 for the one-step-above-dirt phone after a 2 year contract got me a discount.

Also, how many people do you think are "well advised" of safely using security features? Even simple ones? Who don't see Facebook as one gigantic privacy / security geyser? ie, non-security-aware-geek-types? This is a minor, arguable security improvement and a major feel-good for people who don't know any better, and not much else.

Re:More Ways to Stay Secure (Facebook introduces one-time pa... by gcr on Friday October 22, 2010 @09:45PM (#1822248)
You say that most people don't understand security, and unfortunately, you're exactly right. So why do those who know better intentionally choose to make things /less/ secure but market it as /increasing/ security?
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by gcr on Friday October 22, 2010 @09:46PM (#1822251)
I don't see how perpetuating the problem (every phone device is going to be insecurely logged in within the next 2 years) moots the concern. "Everyone does it!" is no excuse for a poor security model.