PUBLIC SERVICE ANNOUNCEMENT: 2FA NOW MANDATORY - YOU DON'T NEED A PHONE NUMBER FFS

[Crispy]

No tough password to remembers and the only security risk is Crispy knowing your dick.

I already know you're *a* dick.

 

[ItsChon]

It automatically sets it to allowed temporarily? How can I do it so it stays allowed on the Codex but no where else? Twiglard

 

[Twiglard]

Zed Duke of Banville anything specific about your 2fa issue?

No, I've posted before that I'm hoping the Codex will settle on an alternative rather than 2FA that requires entering a code via email every time. Until then, I'll put up with it.

If I added cracklib, or ran John the ripper in single mode on all passwords you'd hate it even more.

Detecting reused passwords is more involved and requires constant maintenance so it's too unworkable.

 

[Krice]

Thought I lost my account, but the e-mail change did work after all. It took me couple of weeks to figure out that I can ask for password change and then enable 2FA. Anyway, I think now I have to use Edge to browse this forum, because I reset the password using it since I have taken everything out from Firefox (scripts etc.). Life is not perfect.

 

[lukaszek]

Zed Duke of Banville anything specific about your 2fa issue?

No, I've posted before that I'm hoping the Codex will settle on an alternative rather than 2FA that requires entering a code via email every time. Until then, I'll put up with it.

If I added cracklib, or ran John the ripper in single mode on all passwords you'd hate it even more.

Detecting reused passwords is more involved and requires constant maintenance so it's too unworkable.

you can require password reset for all and then enforce 20character ones with unique signs. This way you basically force your users to use unique passwords and password manager. Then you can turn off 2fa requirement as password reuse will be unlikely

 

[Zed]

this shit is gay

 

[Hag]

I HAD TO ENTER THE CODE THIS MORNING. TOOK ME 10 SOLID SECONDS. MY DAY IS RUINED.

 

[ds]

Behind the scenes picture of the Administration preventing mass deletes by requiring 2FA:

Didn't have to enter the code once yet since enabling it.

 

[Konjad]

Behind the scenes picture of the Administration preventing mass deletes by requiring 2FA:

Didn't have to enter the code once yet since enabling it.

Better than in any corporation I have worked so far.

 

[Caim]

Behind the scenes picture of the Administration preventing mass deletes by requiring 2FA:

Didn't have to enter the code once yet since enabling it.

Better than in any corporation I have worked so far.

I work for a company with an annual income in the nine digits and the last time IT sent out a fake phishing mail as a security test almost a quarter of my dumbass coworkers clicked the mail. A fair chunk of the staff don't even have a corporate email, so the actual percentage of dipshits will be even higher.

 

[Fedora Master]

this shit is gay

This is what people get for supporting the Codex Homosexual Agenda

 

[lukaszek]

I work for a company with an annual income in the nine digits and the last time IT sent out a fake phishing mail as a security test almost a quarter of my dumbass coworkers clicked the mail. A fair chunk of the staff don't even have a corporate email, so the actual percentage of dipshits will be even higher.

it gets better: external company as part of similar exercise sends job offer link. It was visited by more people(from same company) than original recipients.

 

[Caim]

I work for a company with an annual income in the nine digits and the last time IT sent out a fake phishing mail as a security test almost a quarter of my dumbass coworkers clicked the mail. A fair chunk of the staff don't even have a corporate email, so the actual percentage of dipshits will be even higher.

it gets better: external company as part of similar exercise sends job offer link. It was visited by more people(from same company) than original recipients.

Maybe people saw the mail at work, then once home they sat down and gave it another look?

 

[Peachcurl]

Also great: genuine invitation mails for training against "phishing", where the invitation itself is formated like a phishing mail.

 

[lukaszek]

I work for a company with an annual income in the nine digits and the last time IT sent out a fake phishing mail as a security test almost a quarter of my dumbass coworkers clicked the mail. A fair chunk of the staff don't even have a corporate email, so the actual percentage of dipshits will be even higher.

it gets better: external company as part of similar exercise sends job offer link. It was visited by more people(from same company) than original recipients.

Maybe people saw the mail at work, then once home they sat down and gave it another look?

let me rephrase. More company owned machines loaded the link than number of emails sent. People were sharing awesome job posting with coworkers.
'Hey, we are doing security risk for you but are you also aware about workforce rotation that you might be facing?'

 

[CHEMS]

I spent two weeks away because i didn't want to open the email for the verification code

 

[Semiurge]

ITZ happening again. A whole minute of pages not loading, at all.

You'd better see if some posts have been mass deleted again...

 

[Caim]

ITZ happening again. A whole minute of pages not loading, at all.

You'd better see if some posts have been mass deleted again...

Had something similar with liking posts, seeing who rated what and loading of images.

Truly it is the time of ITZ.

 

[DJOGamer PT]

Twiglard, my e-mail didn't get any confirmation code this morning...

Also I think the "remember this device for 30 days" option doesn't work...

 

[Taluntain]

Use the app option, e-mail can be unreliable.

 

[Glop_dweller]

Zed Duke of Banville anything specific about your 2fa issue?

No, I've posted before that I'm hoping the Codex will settle on an alternative rather than 2FA that requires entering a code via email every time. Until then, I'll put up with it.

Same.

Why has SQRL not come up in this thread before now?

https://www.grc.com/sqrl/sqrl.htm

 

[Konjad]

Use the app option, e-mail can be unreliable.

Is there a plugin for logging in that would make use of a fingerprint scanner device? Codex could require dick scan to ensure total security.

 

[Taluntain]

Not that I know of, might be an option with some 2FA apps.

 

[Sodafish]

I cannot for the life of me understand why so many of you are unironically throwing tantrums over entering a 6-digit number once a month. It's the very definition of first world problems.

"But muh auto-delete session cookies!"

Then whitelist the dex FFS. This shit isn't hard, and all the whining is starting to make me question the status of this place as a site for monocled gentlemen.

 

[gaussgunner]

It's the principle of the thing, Sodafish.