Screenshot of select option that sets a cookie in the browser that disables 2FA: "Don't require verification code again."
https://nfts.freeradical.zone/media_attachments/files/113/719/338/005/243/044/original/006e33d533e7a0bf.png
Why, oh why, do sites do this?
When we evaluate the customer facing security of sites, "features" like this need to be explicitly flagged as undermining basic security practice -- in this case, underminig 2FA.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.