What is the point of the 30 day timeout on authenticated logins?

[Spectacle]

Taluntain DarkUnderlord seriously guys, how does making us enter the authentication code every 30 days improve security?

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

 

[Don Peste]

https://en.m.wikipedia.org/wiki/Dead_man's_switch

 

[Dadd]

Acclimating the goyim to punishment

 

[Hellraiser]

This thread is going to end with the timeout being made even shorter won't it?

 

[Law]

not enough security procedures

I demand having my account locked behind a pubic hair DNA analysis

 

[Camel]

how does making us go through 2FA improve security?

FTFY. That’s all thanks to three retards with 123456 passwords.

 

[DarkUnderlord]

Taluntain DarkUnderlord seriously guys, how does making us enter the authentication code every 30 days improve security?

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

It's to stop the Russians hacking people's accounts because of the Ukraine thread.

Oooh I like this new keyboard. Very nice clack to it.

 

[Sunri]

it makes you angry

 

[Hag]

Oooh I like this new keyboard. Very nice clack to it.

What model ?

 

[DarkUnderlord]

MSI GK30.

 

[Spectacle]

Taluntain DarkUnderlord seriously guys, how does making us enter the authentication code every 30 days improve security?

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

It's to stop the Russians hacking people's accounts because of the Ukraine thread.

Oooh I like this new keyboard. Very nice clack to it.

How does the 30 day timeout prevent Russians from hacking any more than 2FA already does?

 

[Hellraiser]

How does the 30 day timeout prevent Russians from hacking any more than 2FA already does?

Russians can only count to 3 days.

 

[Atlantico]

Taluntain DarkUnderlord seriously guys, how does making us enter the authentication code every 30 days improve security?

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

It's to stop the Russians hacking people's accounts because of the Ukraine thread.

Oooh I like this new keyboard. Very nice clack to it.

How does the 30 day timeout prevent Russians from hacking any more than 2FA already does?

It does not.

 

[King Crispy]

If you're worried about an attacker getting hold of an old computer that has an active Codex login

This isn't a concern. Why would anyone who regularly posts here "lose" their computer? It's got nothing to do with that, it has to do with account security in general. In other words, weak passwords, etc.

having logins time out after 30 days of inactivity would be just as effective

This is effectively what's already being enforced.

be a constant annoyance for active users

You don't speak for me, nor for most here, I think. The phone app works perfectly, is extremely easy to use (it takes five seconds to verify) and is completely free. Maybe you can explain how it's supposedly an annoyance?

 

[Lady Error]

Wells Fargo doesn't require 2FA to access your account online, for example. The Codex does.

 

[Gahbreeil]

I'm more interested in why everyone on the 'dex is intent on annoying, slurring, cursing out, being mean to and in general abusing other users.

 

[King Crispy]

Wells Fargo doesn't require 2FA to access your account online, for example

Wells Fargo Sued for Breach That Exposed Social Security Numbers​

 

[Lady Error]

Thank God our social security numbers are protected with 2FA on the Codex.

 

[Harthwain]

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

One thing I am curious about: why is this so annyoing? All you have to do is log in on your e-mail to check out the code, and since you're already trying to access Codex you ought to be on your computer. Or are people using their phones all the time and I am the only one who is using PC for this?

 

[Jonathan "Zee Nekomimi]

Even if then are mainly on phone, you should have access to your email either via app or mobile browser.

 

[Zed Duke of Banville]

I'm more interested in why everyone on the 'dex is intent on annoying, slurring, cursing out, being mean to and in general abusing other users.

 

[Spectacle]

be a constant annoyance for active users

You don't speak for me, nor for most here, I think. The phone app works perfectly, is extremely easy to use (it takes five seconds to verify) and is completely free. Maybe you can explain how it's supposedly an annoyance?

I'll explain that if you can first explain to me what the purpose of the 30 day timeout is, and how it achieves that purpose.

 

[Grauken]

If you're worried about an attacker getting hold of an old computer that has an active Codex login, having logins time out after 30 days of inactivity would be just as effective, and not be a constant annoyance for active users.

One thing I am curious about: why is this so annyoing? All you have to do is log in on your e-mail to check out the code, and since you're already trying to access Codex you ought to be on your computer. Or are people using their phones all the time and I am the only one who is using PC for this?

Some people just like to complain

 

[Grauken]

I'm more interested in why everyone on the 'dex is intent on annoying, slurring, cursing out, being mean to and in general abusing other users.

That's offensive to hexagon lovers

 

[thesecret1]

One thing I am curious about: why is this so annyoing? All you have to do is log in on your e-mail to check out the code, and since you're already trying to access Codex you ought to be on your computer. Or are people using their phones all the time and I am the only one who is using PC for this?

Logging in to my e-mail takes about 30 seconds, which is 30 seconds longer than I'd like to spend trying to login, with no tangible benefit to me.