News for hackers. Stuff that matters.

A comment on What Apple and Google are doing to your push notifications. Parent comment

Re:What Apple and Google are doing to your push notifications by hunter2_ on Friday May 29, 2026 @04:45AM (#48320681)
I can imagine an evolution like:

1. Introduce passwords

2. Introduce email-based reset flow

3. Introduce 2FA (optional)

4. Someone says "take the password reset flow, trigger it automatically when a user tries to log in and has only given their email, hide the password field during login, and after the email is validated drop the user back to their previous journey instead of having them set a new password"

5. You see #4 as #3 failing, but when #3 was never applied it's not quite that. Aside: making #3 mandatory would be smart.

[ Parent | on HN ]
Re:What Apple and Google are doing to your push notifications by projektfu on Friday May 29, 2026 @04:44PM (#48328990)
It's Intuit's normal login flow. Enter username and it then says enter password or click here and we'll text/e-mail you a code. Ironically, if you use a password it will often text you a 2FA code.
[ Parent | on HN ]