News for hackers. Stuff that matters.
Re:Ask HN: What is a secure way to allow 2FA resets? by totallyashill on Thursday December 27, 2018 @12:02PM (#18770708)
Password reuse and 2FA enforcement.

Although, we at HN are the shining tier of amazingness (/s), most people will use the same password across as many accounts as they can, or use some dirivation of the password.

The bigger issue is that plenty of people don't enable 2FA onto their emails as it's never really suggested by the providers, some just don't support it, and the fear of getting locked out of something so central.

It's better than SMS 2nd Factor though.

Re:Ask HN: What is a secure way to allow 2FA resets? by mont on Thursday December 27, 2018 @12:21PM (#18770871)
Gmail at least (sort of) pushes 2fa with their 'security reviews'.