Comment

Comment on When people setup two factor authentication on an account on sites that allow it and insert a phone number, does that site assume by default that it's their own number or do they see it as "a" number?

rdyoung@lemmy.world ⁨10⁩ ⁨months⁩ ago

If it doesn’t ask you to verify the number by entering a code that it texts you, it’s not true 2fa.

As for your sister’s account. Are you sure it was her account and not you just viewing her channel? If you were actually logged in to her account it stuck around because sites store credentials via cookies it’s not unheard of to be able to access previously logged in accounts for a very very long time even after moving across the globe.

And what the fuck do mean by “makeshift DNA”? Unless you meant makeshift 2fa which is still confusing as a term.

source

Sort:hotnew top

shinigamiookamiryuu@lemm.ee ⁨10⁩ ⁨months⁩ ago
That’s what I mean, we had a family computer way back then and YouTube assumed once and remembered its assumption forever. By “makeshift DNA” I mean a set-in-place identifier. I never said it was true two factor authentication if it didn’t text someone, I was asking if, when you choose to be texted, if it’s normal to assume the number chosen to be texted on is property of the person setting it up, versus, for example, a family member lending a number to use. I for one don’t even have a phone number right now.

source
- rdyoung@lemmy.world ⁨10⁩ ⁨months⁩ ago
  Numbers can belong to anyone and yes, they do “assume” that the number you enter is at the least accessible by you. It would make no sense for you to make up a number or give them a relative or friends number especially for 2fa.
  
  Why don’t you have a phone number? You can get a cheap prepaid phone and if you don’t want to pay for cell service you can import that number to Google Voice or other services like textnow, you could even go straight to textnow and get a free number from them. I have one that I pay like $5/year for them to hold on to just in case I feel like I need it.
  
  source
  - shinigamiookamiryuu@lemm.ee ⁨10⁩ ⁨months⁩ ago
    You mean a burner phone, right? Those are good for verification but not if you regularly need something to log in with.
    
    source
    rdyoung@lemmy.world ⁨10⁩ ⁨months⁩ ago
    Which is why I said you could port that number elsewhere. Google Voice, textnow, etc.
    
    I personally uave at least 5 numbers.
    
    GV that was ported from tmo a good 15+ years ago
    
    My direct personal line
    
    My direct business line
    
    4)My GV business line
    
    My textnow number that I am just sitting on.
    
    I’m going to set up a family number attached to our family email.
    
    source