general

it's all dumb though

no point if I only have to do it once every 30 days

2fA doesn't actually protect anything

but I hate it

I already use a password manager and have unique passwords for every site I use

Pika is the big gay

got it

lol

>not using the same password for every site

what a nerd

fag

look

I could not keep using thisisapassword1234

on all my accounts

it had to change

thisisapassword1234!

lol

While that is not exactly my old password, that is along the idea of an old password I use to use

i use the same password for everything but i used dice rolls to create it kappa4

spooky help. My university uses two different sites

I need to log in to both

every 30 days

what is your school even protecting?

email, bank, and social media maybe make sense to actually protect

but your school site?

They want us to enter our social insurance numbers on our school account for tax information

I did not

because fuck them

my email is just my name, if you know that you can email me

they do not store bank info

2FA makes sense for using a new device, but forcing it on an already trusted device is retarded

Our school does the exact same thing

same

I wish physical keys caught on more

YubiKey is gay, but I like the idea

force students to get one of these and put an rfid chip in their ids

that's worse, I like the idea of a dongle on your keychain, that unlocks accounts on devices within 10ft of you or whatever with a password of course

can't plug a smartcard into your phone

bringing about the decline of smartphone use is a great side-effect

you can read rfids with a smartphone anyway

wait thats nfc

not a lot of them, I thought they were moving to a new standard

which is why GooglePay or whatever the android equivalent of ApplePay is fucked right now

every month the government issues you 50 device chips that let you turn on an electronic device

Physical keys are great

They make simple USB keys

2fa isn’t bad

2fa in general needs to catch on more

2fa is a waste of time

Yeah

Nah

fuck it

literally just don't use the same password on everything

As a sys admin in training, I strongly support 2fa and all that good stuff

Chapter 11 my friends

as a general user of technology. I am not using something that is tedious and annoying just for minor security improvements

I also don't want to give every website in the world my phone

frequent forced password changes are one of the worst things for security, so I would extend that to frequent forced 2FA checks as well

Spooky has physical key pilled me

making it so you can't login without a personal physical key makes the most sense

because when would you ever need to login when you are not near your pc

/have your key

then you get to deal with the idiots who carry around their laptops with the physical key in the front pocket of the bag

yeah well, people are retards

Not a fan of password experations

What a classic

not a fan of monthly password expirations

Classic

I can understand changing your passwords occasionally, but being forced to every month

yeah thats retarded

its against the iso standard

Which iso standard now

whatever the one advising password guidelines is

Ope

Sure

All I know is I was taught to make those things experie once every 1 to 3 months

For ideal security or whatever

yeah have fun dealing with the low security spawning from every single password in the system having the current month as part of it

Oh yeah