Not once was I asked if I wanted 2FA (two-factor authentication) for my Apple or Amazon accounts.
I don’t want 2FA, because, being homeless/poor, you frequently lose access to phones and the like. That’s why a lot of homeless people will have like a dozen abandoned FB accounts (I have 3), because we just haphazardly use the suggested “secure password” to log in, and then someone steals our phone, or we lose it, or drop it in the toilet.
So no, Apple, I don’t have that device anymore. I don’t have that phone number either. Or access to that email address. The last four digits of a debit card I’ve used? b0i.
The one thing I do have?
MY FUCKING PASSWORD
I’m getting locked out of accounts I have the fucking password for! What the FUCK?
i agree with this completely. without 2fa your accounts are gonna get taken, its just a matter of time and/or will.
I think it’s a mistake to treat security as uniquely important. Accessibility matters too. Not being able to access your accounts is just as bad as someone else being able to access your accounts.
You will be hard pressed if you want to add an accessibility feature to a service which undermines security. For banking and government services, people should be able to physically present to a bank or government building with an ID if they cannot access a service online, but allowing non-2FA online access to banking, tax or healthcare is a massive security risk which needs mitigated somehow. Fraud is not an acceptable risk for accessibility requirements. 2FA codes are the only real way to authenticate against online services in a way which prevents malicious actors for most cases. Passwords leaks, brute force and botnet attacks are the reality of modern security considerations.
Good thing that we don’t have a record level of fraud. Making everything worse was definitely worth it.
that depends very much on the account and what it controls access to
Who and why though?
lot of things you can do with a hijacked account, including trying to phishing attacks on accounts on your friends list or contacts. Having poor security practice, even if there’s a good reason for compromise, puts everyone you know at greater risk.
ah so my accounts are safe because I dont have any.
sure, you’ll just get the random bots offering art commissions or mr. beast bucks.
I mean if some person needs to create new accounts because they keep loosing access to their old accounts their contacts are just as vulnerable to impersonating accounts as to someone hijacking the account.