News for hackers. Stuff that matters.

A comment on Ask HN: If I get locked out of everything, please try to help me. Parent comment

Re:Ask HN: If I get locked out of everything, please try to ... by Gigachad on Monday December 12, 2022 @08:45PM (#33963547)
It used to be opt in until the icloud hacking saga where the public demanded something be done. So it was decided users want mandatory security by default. Almost all of these services provide backup codes you can write down on paper as well.

Sure, some people are going to lose their only device and the bit of paper, but at that point if you have literally nothing to identify yourself with, it's going to be hard to provide a secure service to you.

[ Parent | on HN ]
Re:Ask HN: If I get locked out of everything, please try to ... by btilly on Monday December 12, 2022 @08:57PM (#33963646)
It can still be opt out with a fallback on the old approach of security questions. The name of your first pet, your favorite teacher, etc.

It doesn't matter how much in general 2FA works out better for most people, there are lots of people for whom it is not viable. They know who they are. Give them an option that doesn't make their life worse.

[ Parent | on HN ]
Re:Ask HN: If I get locked out of everything, please try to ... by kelnos on Tuesday December 13, 2022 @04:11AM (#33966419)
> They know who they are.

OP knows who they are, but I would not be surprised if many poor/homeless users wouldn't realize they need to opt out of something until they find out the hard way when they're locked out and can't get back in.

[ Parent | on HN ]
Re:Ask HN: If I get locked out of everything, please try to ... by alasdair_ on Monday December 12, 2022 @09:42PM (#33964029)
>Give them an option that doesn't make their life worse.

This is the sort of thing that really should be handled by government

[ Parent | on HN ]
Re:Ask HN: If I get locked out of everything, please try to ... by Friday0722 on Tuesday December 13, 2022 @03:55AM (#33966318)
That might help for a certain subset of people in this scenario, but there are also people with subtle mental conditions that, while capable of living productive lives, are also unable to deal with MFA. There are also the elderly and non tech-literate.
[ Parent | on HN ]
Re:Ask HN: If I get locked out of everything, please try to ... by savingsPossible on Monday December 12, 2022 @09:06PM (#33963726)
Optional != opt in

Just make it opt out... You 2fa, do a song and dance, and 2fa is gone

[ Parent | on HN ]