PUBLIC SERVICE ANNOUNCEMENT: 2FA NOW MANDATORY - YOU DON'T NEED A PHONE NUMBER FFS

[Taluntain]

This might be a SHOCKING REVELATION but deleting posts is not supposed to fuck up threads.

Let's see here, option 1: fix whatever is wrong with Xenforo, name and shame the retard who got hacked.

Deleting a few posts doesn't mess anything up. Deleting thousands does. The XF devs are aware of the problem but in no rush to fix it because basically "you shouldn't do that anyway". Yeah.

 

[zapotec]

This might be a SHOCKING REVELATION but deleting posts is not supposed to fuck up threads.

Let's see here, option 1: fix whatever is wrong with Xenforo, name and shame the retard who got hacked.

Deleting a few posts doesn't mess anything up. Deleting thousands does. The XF devs are aware of the problem but in no rush to fix it because basically "you shouldn't do that anyway". Yeah.

Then the software it's not GDRP compliant and should be reported

 

[Mortmal]

Western people being afraid to be associated with this forum really shows what peak freedom looks like.

Most western people here know it, we just have a facade of democracy , a little less corruption, but thats about all.

 

[Taluntain]

This might be a SHOCKING REVELATION but deleting posts is not supposed to fuck up threads.

Let's see here, option 1: fix whatever is wrong with Xenforo, name and shame the retard who got hacked.

Deleting a few posts doesn't mess anything up. Deleting thousands does. The XF devs are aware of the problem but in no rush to fix it because basically "you shouldn't do that anyway". Yeah.

Then the software it's not GDRP compliant and should be reported

There is no GDPR requirement to allow anyone to have all of their posts deleted. The site operator only needs to remove personally identifiable information on request from the account and/or specific posts if the poster points them out and can't edit them on their own, but is under no obligation to go deleting entire post histories of anyone. And even that only goes for EU-based services, which the Codex isn't.

 

[Semiurge]

I had to setup 2FA again and now the codes work. I'm puzzled. System time is synced with the phone, network speed seems ok.

Do I need to do this shit every day from now on?

 

[Dishonoredbr]

This forum has more demanding 2FA shit than my bank account. Holy shit

 

[Taluntain]

I had to setup 2FA again and now the codes work. I'm puzzled. System time is synced with the phone, network speed seems ok.

Do I need to do this shit every day from now on?

Of course not. You only do one verification every 30 days under normal circumstances. If you're seeing anything else, it's an issue on your end, either due to various addons you're using interfering with normal functionality, blocking cookies, or who knows what else you have installed/misconfigured on your end.

The backup codes are only meant for BACKUP purposes, i.e. if you lose your primary access. They are not meant for normal use.

 

[Atlantico]

And even that only goes for EU-based services, which the Codex isn't.

It doesn't matter at all where you are based or think you are based, if you cater to EU citizens then GDPR applies.

Illiterate boomers

 

[Lord of Riva]

You don't need to use your phone number. Feels like I'm playing chinese whispers

https://getassist.net/email-services-dont-ask-for-phone-verification/

I think I have a solution. Taluntain Would it be possible to make it so the only people who can edit posts are the ones with 2FA enabled? That way we get to preserve our right to delete posts, and if someone chooses to have an unsecure account, they won't have the ability to delete their posts and this will prevent shit like this from happening. If someone ends up getting hacked and all their posts edited, then that will be their fault and the administration won't have any responsibility to fix the edited posts.

It'd be possible, but it'd require custom coding, so unlikely. Permissions for deleting and editing posts are separate in XF, but whereas we can set time limits on editing old posts, post deletion doesn't have the option to set how far back it can go by default. However, there is an addon to enable post deletion time limits as well, so we could use that if we decided that that's preferable to 2FA for everyone. Then the muh-freedomz complaints about 2FA would just be replaced with muh-freedomz complaints about not being able to delete posts.

Just quoting Taluntain for the rating.

If I had not figured out I can use an E-Mail I would not be able to post you nobheads.

 

[Semiurge]

Of course not. You only do one verification every 30 days under normal circumstances. If you're seeing anything else, it's an issue on your end, either due to various addons you're using interfering with normal functionality, blocking cookies, or who knows what else you have installed/misconfigured on your end.

The backup codes are only meant for BACKUP purposes, i.e. if you lose your primary access. They are not meant for normal use.

The same happened when trying to log in from my phone. Since I got to the part of entering the secret code after the username/password sign-in, what could possibly be wrong with the browsers' settings? No, it must be the app or something in the network that affects both devices. I literally lost my primary access.

If the issue sorts out I'll still need to find a way to keep those login cookies safe while removing all others, so that this can only be done once a month.

 

[Melcar]

Anal swap login soon.

 

[Taluntain]

If I had not figured out I can use an E-Mail I would not be able to post you nobheads.

You can use THE SAME e-mail you used to register on the Codex.

 

[Semiurge]

Or google mail since it's very likely that your phone already has a google account. You can then read the verification code from the toast notification of your phone.

 

[Catacombs]

Do you know of any other way to use a QR code reader than with a smart phone?

You can extract data from a QR code using an offline QR reader.

 

[Jaedar]

I think I have a solution. Taluntain Would it be possible to make it so the only people who can edit posts are the ones with 2FA enabled? That way we get to preserve our right to delete posts, and if someone chooses to have an unsecure account, they won't have the ability to delete their posts and this will prevent shit like this from happening. If someone ends up getting hacked and all their posts edited, then that will be their fault and the administration won't have any responsibility to fix the edited posts.

It'd be possible, but it'd require custom coding, so unlikely. Permissions for deleting and editing posts are separate in XF, but whereas we can set time limits on editing old posts, post deletion doesn't have the option to set how far back it can go by default. However, there is an addon to enable post deletion time limits as well, so we could use that if we decided that that's preferable to 2FA for everyone. Then the muh-freedomz complaints about 2FA would just be replaced with muh-freedomz complaints about not being able to delete posts.

To be fair, people being allowed to delete months old posts just to spite someone should arguably be removed anyway. If you need to hide codex affiliation due to being hunted by gestapo you can always ask to get your account nuked.

 

[Lord of Riva]

If I had not figured out I can use an E-Mail I would not be able to post you nobheads.

You can use THE SAME e-mail you used to register on the Codex.

I know???

That is what I did. There is a warning though that you should use this only as a last resort, which lead me to my comment.

Please update your post interpretation software.

 

[zapotec]

This might be a SHOCKING REVELATION but deleting posts is not supposed to fuck up threads.

Let's see here, option 1: fix whatever is wrong with Xenforo, name and shame the retard who got hacked.

Deleting a few posts doesn't mess anything up. Deleting thousands does. The XF devs are aware of the problem but in no rush to fix it because basically "you shouldn't do that anyway". Yeah.

Then the software it's not GDRP compliant and should be reported

There is no GDPR requirement to allow anyone to have all of their posts deleted. The site operator only needs to remove personally identifiable information on request from the account and/or specific posts if the poster points them out and can't edit them on their own, but is under no obligation to go deleting entire post histories of anyone. And even that only goes for EU-based services, which the Codex isn't.

If I want to delete my account because of "right to be forgotten" you will have to to check if my posts contain any data pertaining to my person, this unfeseable with users with tens of thousands of posts.

 

[LarryTyphoid]

I don't know why I'm getting rated "cringe" for using a password manager and being responsible; if you fags did the same thing then I wouldn't have had to install this authy faggotry onto my phone.

 

[Tacgnol]

I don't know why I'm getting rated "cringe" for using a password manager and being responsible; if you fags did the same thing then I wouldn't have had to install this authy faggotry onto my phone.

Basic PW hygiene should be common sense. You can't use the same PW everywhere anymore considering how many sites and DBs get compromised, I'm surprised this even needs saying in CURRENT_YEAR.

 

[PorkyThePaladin]

I make my password easier to remember AND more secure by appending a random number of "crispysucks" to the end.

 

[Maxie]

Fact, not opinion: if your password isn't "password," you're a fucking dork

 

[Melcar]

Cuck factor authentication.

 

[PorkyThePaladin]

It is a sad commentary on our times that this thread now has more pages than most recently released video game ones...

 

[Ranselknulf]

I had to setup 2FA again and now the codes work. I'm puzzled. System time is synced with the phone, network speed seems ok.

Do I need to do this shit every day from now on?

Of course not. You only do one verification every 30 days under normal circumstances. If you're seeing anything else, it's an issue on your end, either due to various addons you're using interfering with normal functionality, blocking cookies, or who knows what else you have installed/misconfigured on your end.

The backup codes are only meant for BACKUP purposes, i.e. if you lose your primary access. They are not meant for normal use.

Unless, ofc, you use a VPN. Then its every time.

 

[Tacgnol]

I had to setup 2FA again and now the codes work. I'm puzzled. System time is synced with the phone, network speed seems ok.

Do I need to do this shit every day from now on?

Of course not. You only do one verification every 30 days under normal circumstances. If you're seeing anything else, it's an issue on your end, either due to various addons you're using interfering with normal functionality, blocking cookies, or who knows what else you have installed/misconfigured on your end.

The backup codes are only meant for BACKUP purposes, i.e. if you lose your primary access. They are not meant for normal use.

Unless, ofc, you use a VPN. Then its every time.

I've used Proton and NordVPN and never seen this behaviour.