Recent comments in /f/news

ehunke t1_je5p4p6 wrote

There are more then two sides to every story...and there has to be more going on here. Clearly this guy is of sane mind because he was in good health, he had proper clothing, he had established new identification, he was wearing a covid mask meaning he was up to speed on current events...did the cops inadvertently reunited him with people he legitimately wanted to escape from?

150

kindrudekid t1_je5nx1s wrote

No they still offer the 2FA service.

Previously they offered it via SMS, TOTP based Authenticator Apps (Google Authenticator, Duo Security, Authy etc) and Security Keys (Yubikey)

SMS based 2FA is weak and been vulnerable for almost a decade now. NIST sent out an official notice back in 2016. Google and Apple phased it out completely too.

So Twitter just disabled the shitter, weaker, more vulnerable SMS based 2FA is not available. Not only is it bad from a InfoSec perspective, it is also a line item in capital expenses from a business perspective.

I do agree that the phrasing from twitter was shitty and instead of asking users to fork over money, they could have guided them to the alternatives.

−1