PUBLIC SERVICE ANNOUNCEMENT: 2FA NOW MANDATORY - YOU DON'T NEED A PHONE NUMBER FFS

[Melcar]

The Codex average IQ is 50.

 

[Atlantico]

If you have a unique password that can't be guessed, then 2FA does nothing for you.

Even with a strong password, 2FA may still help in rare cases. That is, when you use 2FA via two different devices, and only one of those devices gets compromised.

Rare cases yes. If I was an admin for a website I'd use 2FA, just to prevent an accidental "oops I somehow leaked my password" situation. It's the responsible thing to do as an admin.

That would deflect almost all casual wannabe script kiddies. A dedicated hacker has tools to infect phones and break the 2FA easily. Such as state sponsored hackers, but then if state sponsored hackers are after you, eh. You're pretty screwed.

Point being, 2FA is absolutely worth doing in certain situations, but not all. Nobody could possibly have hacked into my forum account without actually knowing my password. The problem is leaked passwords on the one hand and the law of diminishing returns on the other.

 

[Zed Duke of Banville]

Perhaps someone could compile a list of all alternatives to 2FA that would successfully prevent the malicious from entering old Codex accounts, from people who re-used the same username and password as on other sites that have had their users' details exposed at some point, and then mass deleting posts, which screws up the forum in general and particularly threads that have a sufficient number of posts deleted.

 

[OSK]

Perhaps someone could compile a list of all alternatives to 2FA that would successfully prevent the malicious from entering old Codex accounts, from people who re-used the same username and password as on other sites that have had their users' details exposed at some point, and then mass deleting posts, which screws up the forum in general and particularly threads that have a sufficient number of posts deleted.

I already provided one! Have Windows users sign in with their Microsoft accounts! You could also add Facebook and Google as options!

 

[United Nations]

Somebody needs to fix the fucking internet, maybe even somebody that posts here.

No more captcha, no more picture puzzles, no more codes sent to my fucking email address or phone.

No more disabling my ad block extension, antivirus, or vpn just so I can access a website.

 

[gaussgunner]

Perhaps someone could compile a list of all alternatives to 2FA that would successfully prevent the malicious from entering old Codex accounts, from people who re-used the same username and password as on other sites that have had their users' details exposed at some point, and then mass deleting posts, which screws up the forum in general and particularly threads that have a sufficient number of posts deleted.

Enable a password strength requirement and force everyone to change passwords.

 

[Clockwork Knight]

People have strong passwords that they reuse for every site that demands a strong password. Pwn City.

 

[Vic]

just add a checkbox on login “I am not a hacker” that should keep them out

 

[Tacgnol]

just add a checkbox on login “I am not a hacker” that should keep them out

"Putin is gay" mandatory checkbox.

 

[ds]

just add a checkbox on login “I am not a hacker” that should keep them out

There is no need for a custom checkbox when the Codex could just implement RFC 3514.

 

[Semiurge]

Perhaps someone could compile a list of all alternatives to 2FA that would successfully prevent the malicious from entering old Codex accounts, from people who re-used the same username and password as on other sites that have had their users' details exposed at some point, and then mass deleting posts, which screws up the forum in general and particularly threads that have a sufficient number of posts deleted.

Nuke all inactive alts. They're a big target for hijacks anyway.

 

[whydoibother]

Just delete all accounts that don't have at least 500 posts in the Ukraine thread, tbh.

 

[Crispy]

 

[whydoibother]

Just delete all accounts that don't have at least 500 posts in the Ukraine thread, tbh.

Wow, what a great idea. The administration should strongly consider this!!

 

[Crispy]

 

[whydoibother]

Der ewige Jude, blackmails you to give your phone number to protect your account, then bans your account.

 

[Caim]

Just delete all

ftfy

 

[Zed Duke of Banville]

just add a checkbox on login “I am not a hacker” that should keep them out

"Putin is gay" mandatory checkbox.

Although it would do nothing to resolve our current "hacker" problem, I've long maintained that the Codex would be greatly improved by requiring everyone to take an oath that they reject Bioware and all its works.

 

[OSK]

Although it would do nothing to resolve our current "hacker" problem, I've long maintained that the Codex would be greatly improved by requiring everyone to take an oath that they reject Bioware and all its works.

Make it CDPR instead.

 

[Apostle Hand]

this two step verification is pain in the ass

 

[The_Mask]

just add a checkbox on login “I am not a hacker” that should keep them out

"Putin is gay" mandatory checkbox.

Although it would do nothing to resolve our current "hacker" problem, I've long maintained that the Codex would be greatly improved by requiring everyone to take an oath that they reject Bioware and all its works.

That would burn some people like holy water. Holy smokes... ROFL

 

[Vic]

only good game BioWare made was BG1

 

[Vic]

so I just installed the addon 'EditThisCookie' and set the expiration for the 2fa cookie to expire in july 2024, which was the max it allowed me to do. thoughts?

 

[MerchantKing]

This 2FA policy is the smartest thing this website as ever done. 2FA is necessary to personal internet security. The more 2FA checks you have to go through, the less likely a goy is going to be able to get into your account. Even if he discovers both your passwords, you have a dozen more 2FA's he has to go through which he doesn't know the passwords to.

 

[Vic]

This 2FA policy is the smartest thing this website as ever done. 2FA is necessary to personal internet security. The more 2FA checks you have to go through, the less likely a goy is going to be able to get into your account. Even if he discovers both your passwords, you have a dozen more 2FA's he has to go through which he doesn't know the passwords to.

welcome back, how was life outside