Why even let users set their own passwords?

Re:Why even let users set their own passwords? by hkt on Saturday July 22, 2023 @11:41AM (#36827173)

It is incredibly useful to powerful people to keep at this generational war narrative, as it keeps people who might otherwise work together from doing so with an aim of crushing the power of the wealthy.

The fact is, anti-human attitudes to both housing and technology are harmful everywhere. Nobody has to "win" at the other side's expense here.

[ Parent | on HN ]

Re:Why even let users set their own passwords? by xcxcx on Saturday July 22, 2023 @01:57PM (#36828256)

Some games are zero sum and some aren't. Everyone is more secure if a large bank replaces 2FA over unencrypted SMS, even though some may be inconvenienced.

Leveling down on everyone's security in exchange for usability for a segment of the population is not a realistic long-term strategy.

[ Parent | on HN ]

Re:Why even let users set their own passwords? by hkt on Saturday July 22, 2023 @03:41PM (#36829151)

As opposed to encrypted SMS? I'm genuinely intrigued at the idea that's a thing.

As for the rest, is there any actual evidence of widespread interception of SMS 2fa actually being a problem?

[ Parent | on HN ]

Re:Why even let users set their own passwords? by xcxcx on Saturday July 22, 2023 @10:19PM (#36831994)

Not sure if you're arguing that it's a great idea to run 2FA over SMS or if you're just acting up

[ Parent | on HN ]