Hacker News new | past | comments | ask | show | jobs | submit login

I just wish organizations would quit pushing two-factor authentication on people who don't want it. If I have a 30-character passphrase (inspired by "correct horse battery staple") that I'll never need to write down, then do I really need additional protection for my accounts? (…yeah, probably I do and I'm just being naive; maybe someone will look over my shoulder in a coffee shop.)

I miss the good old days when there weren't ads between posts on Instagram, and just having a password was enough, and websites forced cookies on you without asking permission, and the YouTube subscription button was yellow. And I'm only 24. I'll make a great crotchety old man someday.




Sites get hacked all the time, and some either have bad hashing, or get so thoroughly hacked that the clear-text passwords get exposed. You shouldn’t re-use passwords.


At least the 2FA solutions are pretty much all open; it would be much worse: "please install our proprietary app available only for these two proprietary systems".




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: