Re:Tell HN: It is impossible to disable Google 2FA using bac...
by ironmagma on Thursday January 19, 2023 @12:02PM
(#34442650)
Time to repeal 2FA. I can't believe it's required for SOC2 type 2 compliance.
[ Parent
| on HN ]
Re:Tell HN: It is impossible to disable Google 2FA using bac...
by jay-barronville on Thursday January 19, 2023 @12:25PM
(#34442937)
2FA/MFA isn’t the problem. Google is just a pain to deal with when their products don’t work as expected. On one hand, security-wise, it’s good that they tend to design their algorithms to err on the side of being restrictive, but on the other hand, they have no legit support, so if you or their algorithms mess up and you’re locked out of your account, you’re basically on your own. For a company so many of us rely on so deeply, that’s awful!
Re:Tell HN: It is impossible to disable Google 2FA using bac...
by MetaWhirledPeas on Thursday January 19, 2023 @01:06PM
(#34443452)
The alternative is picking a smaller company that might be an easier hacking target or might go out of business when you're not paying attention. I have a Protonmail account but I do wonder how long they'll be around.
Re:Tell HN: It is impossible to disable Google 2FA using bac...
by ironmagma on Thursday January 19, 2023 @02:26PM
(#34444461)
Nobody should be forced into this terrible scheme if even Google can’t get it working. It’s a case of “this idea isn’t bad, people just implement it wrong”. If nobody can implement it right, it’s not right. Complexity kills.
Re:Tell HN: It is impossible to disable Google 2FA using bac...
by sureglymop on Thursday January 19, 2023 @12:35PM
(#34443062)
2FA is okay. But the practice of backup code sucks. Instead, save the TOTP hash and make extra sure to back it up. Then you can just reconfigure your 2FA app.