SIGforum
Two-Factor Authentication
July 29, 2025, 10:42 AM
PASigTwo-Factor Authentication
I get that scammers and hackers are out of control now but does two-factor authentication need to be used on EVERY FRIGGEN THING now?
"I see you are trying to order a triple heart attack burger from Clogged Up Burgers! Please check your email for a code to login"
Really?

July 29, 2025, 10:59 AM
bean357YES! Also, WHY should I have to have possession of a mobile device as well as a friggin computer with email to verify and authenticate in order to pay one of my own damn bills!?
July 29, 2025, 11:19 AM
AnushYes, I am also tired of that shit. When did companies decide to spend $1.00 on security to save $.05 in theft and lose $2.00 in sales. If someone wants to pay my bill so what.
__________________________________________________
If you can't dazzle them with brilliance, baffle them with bullshit!
Sigs Owned - A Bunch
July 29, 2025, 11:29 AM
konata88I'm worried about this - what if I lose my phone? What if I die suddenly and my wife needs to access accounts? Do I need a third phone that we share between the two of us just for MFA?
MFA needs to accommodate spouses if appropriate, not just a single person. And have redundancy.
I hate hackers.
"Wrong does not cease to be wrong because the majority share in it." L.Tolstoy
"A government is just a body of people, usually, notably, ungoverned." Shepherd Book July 29, 2025, 11:29 AM
smschulzI think it's great, I've never seen it except for financial areas, so why not?
Email or Text confirmation to register or start a new account retail or otherwise makes sense too.
One of my IT clients has had multiple hack attempts and although the bank caught it, 2FA they do not have and I don't understand why every bank doesn't have it.
It's just a
layer of security, not an end-to-end solution but so many of us get lazier and lazier and that is the opportunity to get taken, IMO.
July 29, 2025, 11:33 AM
parabellumIt takes a few seconds, nothing worth complaining about.
July 29, 2025, 12:39 PM
joel9507I'm not a big fan either, partly due to the hassle day-to-day and partly because of the complexities arising when your second factor happens to be out of commission (cell phone battery/net connection/email carrier issue, etc.) when you need to get something done.
But, yeah, you need security. So I grit my teeth and enable it.
I was at a startup that came up with the idea and the founders got a patent on it in 2008. The founders were focused on their business (medical records management) rather than licensing (or enforcing) their patent, so they never went for royalties.
Personally, I suspect they'd have gotten a boatload more money pursuing licensing fees, but that's me. How cool would it have been, getting a few cents per authorization for the past 17 years?
July 29, 2025, 01:29 PM
229DAKquote:
Originally posted by smschulz:
I think it's great, I've never seen it except for financial areas, so why not?
Medical, too.
_________________________________________________________________________
“A man’s treatment of a dog is no indication of the man’s nature, but his treatment of a cat is. It is the crucial test. None but the humane treat a cat well.”
-- Mark Twain, 1902
July 29, 2025, 02:22 PM
GustoferI'd rather they just do the second factor as the only factor. Send me a text and I'll put in the code. Done. But, no.....
I also have to put in a password that must be changed nearly every month and contain twelve characters, one of which needs to be capitalized, two must be numbers, and you must have God knows how many special characters. Oh, and it can't be too close to any one that you've had previously.

I am so sick of passwords. Why not just let me put whatever the hell I want to as a password? It's my information or money. If I want to risk it? So be it. Fuckers!
Other than that, I don't have any strong feelings about it either way.
________________________________________________________
"Great danger lies in the notion that we can reason with evil." Doug Patton.
July 29, 2025, 03:49 PM
P250UA5The frustrating ones are the ones that don't give the option to choose your method.
We have a system at work that only does 2FA via email, with an 'up to 15 min' delay in getting the code.
Almost everything else we use, is on an authenticator app, with a couple on 2FA via text message.
The Enemy's gate is down. July 29, 2025, 04:24 PM
357fuzzHave it at work. Kind of a pain in the ass. Log on to the system on your laptop and then again you get a code on your cellphone or on a little thingie that automatically picks a random six numbers to punch in to just to open up the friggin thing. Then open the apps you need to do your job which all need passwords…
July 29, 2025, 08:20 PM
sjpim gone on a ship for months at a time with no cell service, this sucks so much!
July 30, 2025, 08:51 AM
PerceptionI agree that it can be a pain, but it's probably one of the best solutions to a billion if not trillion dollar problem. Scamming is easy and consequence free right now, and with the integration of all things electronic having a single account breached can lead to the loss of literally everything a person has worked for their entire life.
The good news for those who hate it is that with the speed technology advances are coming at now, two factor authentication probably won't be secure enough for protection for very much longer and it will be off to the next solution.
"The people hate the lizards and the lizards rule the people."
"Odd," said Arthur, "I thought you said it was a democracy."
"I did," said Ford, "it is."
"So," said Arthur, hoping he wasn't sounding ridiculously obtuse, "why don't the people get rid of the lizards?"
"It honestly doesn't occur to them. They've all got the vote, so they all pretty much assume that the government they've voted in more or less approximates the government they want."
"You mean they actually vote for the lizards."
"Oh yes," said Ford with a shrug, "of course."
"But," said Arthur, going for the big one again, "why?"
"Because if they didn't vote for a lizard, then the wrong lizard might get in." July 30, 2025, 09:00 AM
SpinZoneMy NFCU app on my phone will send my phone the code, and then automatically read and accept the code for me. So helpful.
Every time I get a software update on my iPad, they try to get me to update to 2FA. At least I can still decline it (for now). There is no sensitive information on my iPad. Anything important is off device and requires a login and 2FA, my iPad doesn’t need it as well.
“We truly live in a wondrous age of stupid.” - 83v45magna
"I think it's important that people understand free speech doesn't mean free from consequences societally or politically or culturally."
-Pranjit Kalita, founder and CIO of Birkoa Capital Management
July 30, 2025, 09:06 AM
2BobTannerMy gripe is my bank asking me to verify it’s me seeking to access my accounts when I used their biometric FINGERPRINT scan system, and then they send me an email to my cell phone that I’m using and ask if it’s me.
You’d think my FINGERPRINT would pretty much ensure that it was me on the inquiry end !
---------------------
DJT-45/47 MAGA !!!!!
“Quidquid latine dictum sit, altum videtur.”
"Sometimes I wonder whether the world is being run by smart people who are putting us on, or by imbeciles who really mean it." — Mark Twain
“Democracy is the theory that the common people know what they want, and deserve to get it good and hard.” — H. L. Mencken
July 30, 2025, 09:37 AM
pace40I don't mind the two-factor authentication. I do mind the cell phone number or smart phone requirements. I don't have a cell phone and I'm sure as hell not going to buy one to be able to conduct transactions.
____________
Pace
July 30, 2025, 09:56 AM
konata88I do like the ability to bypass MFA on a given device after the first access.
I'm still very worried about being locked out if I lose my phone or change my phone number and forget to update an account(s).
"Wrong does not cease to be wrong because the majority share in it." L.Tolstoy
"A government is just a body of people, usually, notably, ungoverned." Shepherd Book July 30, 2025, 10:20 AM
PASigquote:
Originally posted by pace40:
I don't mind the two-factor authentication. I do mind the cell phone number or smart phone requirements. I don't have a cell phone and I'm sure as hell not going to buy one to be able to conduct transactions.
How do you not have a cell phone in the year 2025??????????
July 30, 2025, 10:34 AM
12131quote:
Originally posted by PASig:
How do you not have a cell phone in the year 2025??????????
Easy. Just don’t have one. Not everybody has to have a cell phone. It’s just a convenience.
Q
July 30, 2025, 10:50 AM
PASigquote:
Originally posted by 12131:
quote:
Originally posted by PASig:
How do you not have a cell phone in the year 2025??????????
Easy. Just don’t have one. Not everybody has to have a cell phone. It’s just a convenience.
Not if you don't have a landline
They moved on from just being a "convenience" about 10-15 years ago