Recent examples Twitch and Firefox 🤦
A bank I used for a mortgage has mandatory text message 2fa if they think you’re on a new device (won’t allow google auth/etc). And web browsers like firefox/brave block enough cookies/etc that it requires the “new device” authentication everytime I log in.
Problem is, for a couple months there was some delay with their text messages. It would take 10-20 minutes to send your 2fa code, and the code would expire after 5 min, meaning that by the time you got the code it was always expired and unusable.
Made it completely impossible to log in to pay my mortgage payments. Led to some really frustrating talks on the phone about how I didn’t want to pay with a credit card over the phone, I wanted them to fix their damn system so I could log in and pay via bank transfer like usual.
Darkassassin07@lemmy.ca 1 day ago
That and most accounts that use TOTP auth apps, let you bypass/disable them via email 2fa, while also letting you reset your password the same way…
Got access to your marks email? You’ve got both factors.