I understand 2fa, but the way many companies have implemented it is such a shit implementation that it’s nothing more than security theater designed to purposely make my life difficult, but not actually secure anything. Anything to do with medical stuff seems to be particularly bad.
And OMG, don’t get me started on the shit they put behind 2fa for no reason other than fuck with you. Why do I need to log in so I can see some completely public information? Just so they can track me… Ok, I will fucking log in then… And it’s behind 2fa… And because they don’t give a fuck the 2fa server never sends 2fa verification.
So, I think 2fa is technically a great idea and the way to go, but at the same time, I fucking hate 2fa.
“Someone decided our current authentication wasn’t trusted enough so we’re adding 2FA to this system. We now need to you give us information we didn’t already have over this untrusted mechanism, which we will then trust because it’s convenient for us.”
Okay, fair enough, hating on shitty 2FA is something I can get behind. Like,whatever the fuck Paypal is doing, funfact: Customer support can just turn it off.
To connect to my work VPN I have to enter my userid and password on the PC (that I’m already signed into with the same) then unlock my phone, and then open the app, enter the # shown on my PC, then enter my pin on my phone again. Then half the time the connection fails and I have to do it all again. Why it can’t skip the second pin because I JUST FUCKING USED IT TO UNLOCK MY PHONE I don’t know. Then if I want to use teams on my phone I have to use my pin again then I have to also use it to get into outlook, repeatedly all day. Microsoft products are garbage.
I understand 2fa, but the way many companies have implemented it is such a shit implementation that it’s nothing more than security theater designed to purposely make my life difficult, but not actually secure anything. Anything to do with medical stuff seems to be particularly bad. And OMG, don’t get me started on the shit they put behind 2fa for no reason other than fuck with you. Why do I need to log in so I can see some completely public information? Just so they can track me… Ok, I will fucking log in then… And it’s behind 2fa… And because they don’t give a fuck the 2fa server never sends 2fa verification.
So, I think 2fa is technically a great idea and the way to go, but at the same time, I fucking hate 2fa.
“Someone decided our current authentication wasn’t trusted enough so we’re adding 2FA to this system. We now need to you give us information we didn’t already have over this untrusted mechanism, which we will then trust because it’s convenient for us.”
Okay, fair enough, hating on shitty 2FA is something I can get behind. Like,whatever the fuck Paypal is doing, funfact: Customer support can just turn it off.
To connect to my work VPN I have to enter my userid and password on the PC (that I’m already signed into with the same) then unlock my phone, and then open the app, enter the # shown on my PC, then enter my pin on my phone again. Then half the time the connection fails and I have to do it all again. Why it can’t skip the second pin because I JUST FUCKING USED IT TO UNLOCK MY PHONE I don’t know. Then if I want to use teams on my phone I have to use my pin again then I have to also use it to get into outlook, repeatedly all day. Microsoft products are garbage.