Conversation

Notices

1. Embed this notice
   Ulysses (professionalbigot69@poa.st)'s status on Tuesday, 08-Apr-2025 00:39:35 JST Ulysses
   we should move towards passwordless solutions for the web
   
   just send a code to an email address
   • Embed this notice
     Ulysses (professionalbigot69@poa.st)'s status on Tuesday, 08-Apr-2025 00:39:32 JST Ulysses

     in reply to

     • of nothing
     @apropos two code solution then:
     
     present a request code in both the app and the email
     
     send a verification code to the email
     
     have user verify the request code matches before entering the verification code
   • Embed this notice
     T man :sex: :puffgiga: :puffpowerroll: (theorytoe@ak.kyaruc.moe)'s status on Tuesday, 08-Apr-2025 00:39:32 JST T man :sex: :puffgiga: :puffpowerroll:

     in reply to

     • of nothing
     @professionalbigot69 @apropos
     2fa sucks unequivocally in every single way and anyone who presents it as a good option should be shot... so sorry buddy youre first
     
     :yurri14flip: :revolver2:
     Bread up, Bro likes this.
   • Embed this notice
     of nothing (apropos@fsebugoutzone.org)'s status on Tuesday, 08-Apr-2025 00:39:35 JST of nothing

     in reply to
     @professionalbigot69 it's trivially exploitable, but also very obviously exploitable, and locking email down would actually fix the problem in a way that doesn't require more intelligent users.
   • Embed this notice
     T man :sex: :puffgiga: :puffpowerroll: (theorytoe@ak.kyaruc.moe)'s status on Tuesday, 08-Apr-2025 00:49:05 JST T man :sex: :puffgiga: :puffpowerroll:

     in reply to

     • of nothing
     @professionalbigot69 @apropos and? how does 1 extra step prevent them from being retarded....
   • Embed this notice
     Ulysses (professionalbigot69@poa.st)'s status on Tuesday, 08-Apr-2025 00:49:06 JST Ulysses

     in reply to

     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing
     @theorytoe @apropos sorry but my users are retarded babies that didn't grow up during the days of XP/Vista and don't practice web safety
   • Embed this notice
     Ulysses (professionalbigot69@poa.st)'s status on Tuesday, 08-Apr-2025 00:49:22 JST Ulysses

     in reply to

     • EdBoatConnoisseur
     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing
     @EdBoatConnoisseur @theorytoe @apropos my job contract prevents me from letting them die
     T man :sex: :puffgiga: :puffpowerroll: repeated this.
   • Embed this notice
     d (deprecated_ii@poa.st)'s status on Tuesday, 08-Apr-2025 00:49:22 JST d

     in reply to

     • EdBoatConnoisseur
     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing
     @professionalbigot69 @EdBoatConnoisseur @theorytoe @apropos there's nothing wrong with passwords. if an organization can't set up a secure password-based system that's resistant to phishing they'll fuck up whatever other security scheme they try too
     
     if the user is pwned to the point that the attacker has access to their devices, it's game over no matter what
   • Embed this notice
     EdBoatConnoisseur (edboatconnoisseur@poa.st)'s status on Tuesday, 08-Apr-2025 00:49:23 JST EdBoatConnoisseur

     in reply to

     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing

     @professionalbigot69 @theorytoe @apropos Let them die, let the darwinian path run it's course and retarded users get rekt by their own stupidity.

   • Embed this notice
     Bread up, Bro (sickburnbro@poa.st)'s status on Tuesday, 08-Apr-2025 00:52:51 JST Bread up, Bro

     in reply to

     • EdBoatConnoisseur
     • milk
     • d
     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing
     @milk @deprecated_ii @professionalbigot69 @EdBoatConnoisseur @apropos @theorytoe if people are ok with letting facebook vacuum everything out of their lives via smartphones, they're already done for.
   • Embed this notice
     milk (milk@poa.st)'s status on Tuesday, 08-Apr-2025 00:52:52 JST milk

     in reply to

     • EdBoatConnoisseur
     • d
     • T man :sex: :puffgiga: :puffpowerroll:
     • of nothing

     @deprecated_ii @professionalbigot69 @EdBoatConnoisseur @apropos @theorytoe Most people are retarded so MFA is necessary in most use cases