Not once was I asked if I wanted 2FA (two-factor authentication) for my Apple or Amazon accounts.

I don’t want 2FA, because, being homeless/poor, you frequently lose access to phones and the like. That’s why a lot of homeless people will have like a dozen abandoned FB accounts (I have 3), because we just haphazardly use the suggested “secure password” to log in, and then someone steals our phone, or we lose it, or drop it in the toilet.

So no, Apple, I don’t have that device anymore. I don’t have that phone number either. Or access to that email address. The last four digits of a debit card I’ve used? b0i.

The one thing I do have?

MY FUCKING PASSWORD

I’m getting locked out of accounts I have the fucking password for! What the FUCK?

  • Blazkowicz [none/use name]@hexbear.netEnglish
    7·
    25 days ago

    You will be hard pressed if you want to add an accessibility feature to a service which undermines security. For banking and government services, people should be able to physically present to a bank or government building with an ID if they cannot access a service online, but allowing non-2FA online access to banking, tax or healthcare is a massive security risk which needs mitigated somehow. Fraud is not an acceptable risk for accessibility requirements. 2FA codes are the only real way to authenticate against online services in a way which prevents malicious actors for most cases. Passwords leaks, brute force and botnet attacks are the reality of modern security considerations.