PUBLIC SERVICE ANNOUNCEMENT: 2FA NOW MANDATORY - YOU DON'T NEED A PHONE NUMBER FFS

[Skinwalker]

Remove the delete button, problem solved.

Doing this 2FA routine every 30 days on every device is ridiculous bullshit for a discussion forum.

Remove yourself, and you won't have to do this every 30 days. Problem solved.

 

[Tacgnol]

Tacgnol - Pwned in 1 data breach

I use a different password per site, so not overly worried about usernames.

 

[LarryTyphoid]

This is the first time the Russia-Ukraine war has affected ME personally, and it was caused by a vatnik. I hope Russia gets carpetbombed for this inconvenience to me. At least until a Ukrainefag does something worse.

 

[Stavrophore]

This is the first time the Russia-Ukraine war has affected ME personally, and it was caused by a vatnik. I hope Russia gets carpetbombed for this inconvenience to me. At least until a Ukrainefag does something worse.

This is a false flag to tarnish the vatniks.

 

[Atlantico]

Atlantico - Pwned in 1 data breach

I looked up my username on that website and it came up as being part of a databreach at Gawker

I've never even used that website, let alone created an account

There are other "Atlantico" accounts out there you know and when search by my email, Gawker does not show up

This isn't that easy

 

[NJClaw]

Now I have to use my phone to use a website that doesn't even have rusty? wtf

 

[None]

This is a false flag to tarnish the vatniks.

It didn't actually happen and CruduxCruo is being framed and you're just a russophobe and what about America? and so what if it happened the codex deserved it and CruduxCruo was provoked by darkpatriot.

 

[communard]

Crispy is extra insufferable in this thread. I can't wait until he dies of old age in three months.

 

[Haba]

Atlantico - Pwned in 1 data breach

I looked up my username on that website and it came up as being part of a databreach at Gawker

I've never even used that website, let alone created an account

There are other "Atlantico" accounts out there you know and when search by my email, Gawker does not show up

This isn't that easy

Nah, The Brazilian Slaughter, for example baffles me. I can't find his nick on any obvious breaches. Adminos could tell us if there are repeated login attempts (dictionary attack?) or are they getting in with a handful of tries.

And would be interesting to hear which users have had password fails (before the MFA requirement).

 

[LarryTyphoid]

You fags don't use password managers? That's all I need. I don't even have my real email attached to this account, it's a burner from tempmail. And I keep the password to the password manager on a card in my wallet. It's easy.

 

[ind33d]

last thing i need is for someone to pwn my account and start posting retarded shit like "Bioshock Infinite was good"

 

[Tacgnol]

last thing i need is for someone to pwn my account and start posting retarded shit like "Bioshock Infinite was good"

Truly a terrible fate.

 

[GhostCow]

Now I have to use my phone to use a website that doesn't even have rusty? wtf

Reminder that rpghq does not require 2fa and also has all the rusty you could want

 

[NecroLord]

Atlantico - Pwned in 1 data breach

I looked up my username on that website and it came up as being part of a databreach at Gawker

I've never even used that website, let alone created an account

There are other "Atlantico" accounts out there you know and when search by my email, Gawker does not show up

This isn't that easy

Nah, The Brazilian Slaughter, for example baffles me. I can't find his nick on any obvious breaches. Adminos could tell us if there are repeated login attempts (dictionary attack?) or are they getting in with a handful of tries.

And would be interesting to hear which users have had password fails (before the MFA requirement).

But how did they get to those accounts? Password guessing?

 

[zapotec]

Next step will be vaccination certificate

 

[Tacgnol]

Now I have to use my phone to use a website that doesn't even have rusty? wtf

Reminder that rpghq does not require 2fa and also has all the rusty you could want

Rusty actually advocates the use of 2FA:

 

[GhostCow]

Now I have to use my phone to use a website that doesn't even have rusty? wtf

Reminder that rpghq does not require 2fa and also has all the rusty you could want

Rusty actually advocates the use of 2FA:
View attachment 36858

But it's not required and he doesn't advocate for the shitty phone kind.

 

[smaug]

This is an outrage

 

[Tacgnol]

Now I have to use my phone to use a website that doesn't even have rusty? wtf

Reminder that rpghq does not require 2fa and also has all the rusty you could want

Rusty actually advocates the use of 2FA:
View attachment 36858

But it's not required and he doesn't advocate for the shitty phone kind.

You can do the Codex one without a phone as well though, so I don't see the issue.

 

[The_Mask]

Why would people get personal? These are just words on your screen, from a person it's likely you'll never meet.

Stop getting personal.

 

[Atlantico]

Nah, The Brazilian Slaughter, for example baffles me. I can't find his nick on any obvious breaches.

There are many false-positives and others marked "unverified" on the HIBP website

I have only ever used this nickname here and on Rusty's place, nor do I use the same password between these two sites, so anyone wanting to steal my account would have to guess the password

Not super likely to happen

 

[communard]

Blame whatever three-letter agency pays dorkparrot to post here. Obvious false flag.

Edit: Daily reminder to insulate yourself from psyops and put darkpatriot on ignore.

 

[Fedora Master]

Why would people get personal? These are just words on your screen, from a person it's likely you'll never meet.

Stop getting personal.

While there are many relatively normal people here, some Dexers are just niggers.

 

[Reinhardt]

codex war on terror. results are same - gib up your freedom for... for something.

 

[Skinwalker]

A very obvious solution to this problem would be disabling login by username. Everyone can see your username. Match it up with a password, and voile.

However, if the RPGCodex allowed login only by email address, it would be a lot harder, as your email is private to everyone but admins.

Now the potential hacker would have to match up three pieces of information, two of which are supposed to be private. This would prevent most of these hacks, and no need to abuse your userbase with 2FA.