News for hackers. Stuff that matters.
Re:Password expiration is dead, long live passwords by msravi on Monday June 03, 2019 @04:43AM (#20081434)
I don't know, but (at least some of) the apps that need multiple logins for precisely the scenario you suggest, seem to have solved this. Here in India we have some grocery apps that deliver (mainly perishables) every morning, such as Doodhwala (https://play.google.com/store/apps/details?id=com.bangertech...) and MilkBasket (https://play.google.com/store/apps/details?id=com.milkbasket...).

So I register with my phone number, I get an OTP (via SMS) and login into the system to add stuff to my basket, etc. My wife also logs in from her phone, but rather than registering afresh, uses my phone number. Now I get another OTP which she uses to login from her phone. That's it. Same account is logged into on two different phones and the login persists.

I don't know if this is by accident or design, but it works. Hopefully it'll continue to work, and they don't try to "fix" it because it wasn't meant to be that way...

Re:Password expiration is dead, long live passwords by captn3m0 on Monday June 03, 2019 @06:31AM (#20081826)
Only OTP login is not MFA
Re:Password expiration is dead, long live passwords by msravi on Monday June 03, 2019 @07:27AM (#20082075)
Well no, it isn't. But there's really nothing stopping the OTP from being the 2nd factor, and we're still not tied to a single device.