Two Factor Authentication

wiscoaster

wiscoaster

Mar 28, 2021
1,053
1,396
1,571
Wisconsin
#1
I'm sorry, but if you make two-factor authentication mandatory, you will lose me. Two-factor authentication is a freakin' pain in the arse, and since I know I'm cautious enough to protect myself as much as is necessary already, it's an additional (and onerous) additional level of protection I don't want and don't think I need. Two-factor authentication should be an option, not a mandate.

I suspect those members that have been harmed wouldn't have been spared by two-factor authentication.
 
Last edited:
  • Like
Reactions: Doctor Hugocat, pcake, Mr_McBride and 7 others
#5
wiscoaster said:
I'm sorry, but if you make two-factor authentication mandatory, you will lose me. Two-factor authentication is a freakin' pain in the arse, and since I know I'm cautious enough to protect myself as much as is necessary already, it's an additional (and onerous) additional level of protection I don't want and don't think I need. Two-factor authentication should be an option, not a mandate.

I suspect those members that have been harmed wouldn't have been spared by two-factor authentication.
Click to expand...

It involves entering a code emailed to you, once a month.
 
  • Like
Reactions: WG Plum, roccobass, davelowell2 and 1 other person
#6
Jack said:
Seriously? For a bass forum?

How about you need mfa to access the classifieds?
Click to expand...

I suspect it’s the thinking that “it’s only a bass forum” that has caused so many here to reuse passwords. Do you know how much time the staff here spends playing wack a mole with scammers? It looks like about 14 accounts were broken into TODAY. We have to be fast in banning them before they post classifieds. Some even buy a supporting membership to rip us off. IMO it’s a small price to pay to enter a 6 digit code once every 30 days.
 
  • Like
Reactions: BadJazz, instrumentlevel, MonetBass and 19 others
#7
Honestly, 2FA / multi factor auth is extremely important in digital security.

Most people reuse passwords so just a password is not enough. This is not just for your security but also the security of everyone else on this forum and the forum itself.

for example, suppose a scammer gets access to the forum. They now have potentially thousands of ppl they can social engineer into a scam. They do t need thousands, just one or two to make it worth their time. Ppl are moving $ in The classifieds. So there is money on the table for the scammers.

2FA, however, will look different in the near future when more sites adopt a web3 model and passkeys will be the only authentication you need to connect to a site.

OK, so you don’t care who has your info and access, because what are they going to steal if you’re too smart or have nothing to take. Then please think about all the other folks here on TB.
 
  • Like
Reactions: instrumentlevel, MonetBass, Derek Williams and 3 others
#9
Using Google Auth for 2fa is much raiser than finding a relevant thread with the search feature here. Just saying.

I personally use a hardware key that keeps my TOPT 2fa off my devices until I need them.
 
#10
Bass Ape said:
...
Most people reuse passwords so just a password is not enough.... Then please think about all the other folks here on TB.
Click to expand...
Just goes to show that people should be responsible for their own security. It should not be enforced upon them. The forum isn't held responsible for harm caused by fraud. Therefore the forum shouldn't feel it's their responsibility and their mandate to enforce protection on those members that don't need or don't want it.
 
  • Like
Reactions: Doctor Hugocat, ajkula66 and David McIntire
#11
The thing is, what happens when your lack of security puts me a risk?

I agree that everyone should be responsible for their own level of security. However if a server owner requires it for their or their users protection, then they have all the right to run the server as they see fit.

the amount of scammers in the digital space are underestimated by most ppl.

its not 2003 anymore, our digital walls need to be more robust now days.
 
  • Like
Reactions: Kennoath, Andre678 and roccobass
#12
wiscoaster said:
Just goes to show that people should be responsible for their own security. It should not be enforced upon them. The forum isn't held responsible for harm caused by fraud. Therefore the forum shouldn't feel it's their responsibility and their mandate to enforce protection on those members that don't need or don't want it.
Click to expand...
You would feel differently if the mods were not banning hacked accounts and scammers.

Your talkbass would be a very sad place to visit.
 
  • Like
Reactions: MonetBass, roccobass and 5StringBlues
#14
Bass Ape said:
Using Google Auth for 2fa is much (easier) ....
Click to expand...
Easier is not always better. My phone and tablet (android devices) are Google-free, and it sure wasn't easy, but it's worth it to me to remain clear of the Google-verse, or at least as much as humanly possible. I remember fondly a time when our lives and daily activities weren't commodities.
 
  • Like
Reactions: Envincibal, ElectricMatthew, ajkula66 and 6 others
#15
Major Seven said:
And then you have the pleasure of more junk phone calls from whoever steals/buys the info.
Click to expand...
Phone 2fa here is not via text, it’s using Google auth or authy. These both give you a unique 6 digit code to use to log in. This code changes every 60 seconds. So when you log into the server with the code, the server checks the code to see if it’s the same. If it is then you’re in.

You will get no one calling you.
 
#16
MuseChaser said:
Easier is not always better. My phone and tablet (android devices) are Google-free, and it sure wasn't easy, but it's worth it to me to remain clear of the Google-verse, or at least as much as humanly possible. I remember fondly a time when our lives and daily activities weren't commodities.
Click to expand...
So do t use Google auth, use authy.

I actually do t use either, I have a hardware key. In order for someone to get my codes, they would need physical access to the key.
 
#17
MuseChaser said:
Easier is not always better. My phone and tablet (android devices) are Google-free, and it sure wasn't easy, but it's worth it to me to remain clear of the Google-verse, or at least as much as humanly possible. I remember fondly a time when our lives and daily activities weren't commodities.
Click to expand...
Long gone days!!! The world looks and operates differently now.
 
  • Like
Reactions: roccobass
#18
gln1955 said:
Why don't you explain that this is how it works up front? When I went to sign up for 2FA, it recommended against the email option. The prospect of needing my phone to log into TB was very off-putting.
Click to expand...

Yes. Obviously one code a month is easier that a text every time you want to use the site. @paul please let us know if the email is OK, or if it is recommended to use text.
 
You must log in or register to reply here.
Top Bottom
Back