News for hackers. Stuff that matters.

A comment on Librarian's Letter to Google Security. Parent comment

Re:Librarian's Letter to Google Security by 0xbadcafebee on Monday August 01, 2022 @10:56AM (#32306846)
> Really, this does not seem like a problem Google caused,

The problem is 2FA. 2FA causes people to get locked out of their accounts. Google mail requires 2FA, the government does not. If Google turns off 2FA requirement, the problem in the letter goes away. But they won't.

Google is the cause of the problem, and can easily solve it.

[ Parent | on HN ]
Re:Librarian's Letter to Google Security by rossdavidh on Monday August 01, 2022 @03:45PM (#32311143)
Google didn't introduce 2FA for no reason. While Google does lots of things for reasons I don't like, 2FA was most definitely introduced for valid reasons, which could easily result in a problem as bad (or worse) than the one the librarian is discussing.

The IRS recently had a problem with people using their online access tools to get other people's refund. Insufficient security on authentication can easily be as bad or worse than 2FA.

[ Parent | on HN ]