• 0 Posts
  • 6 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle
  • Wow, we gone full circle here. 2FA (the “protocol”, not the application mentioned in the OP) was conceived to increase security by requiring a second factor (not second secret). So we would need the password (knowledge based authentication) and the code generating hardware (possession based authentication). If we stuff all our 2FA secrets into a web service, we efficiently removed the possession factor of the authentication, making it one where two knowledge factors (password for the thing you want to login to and password for the hosted 2FA storage) are sufficient.





  • Lemmy does not support karma, but account age if I’m not mistaken. Maybe add a rule to require a certain account age before accepting a post. The main idea is to prevent astroturfing, spam accounts and socket puppets for ban evasion.

    Not sure how effective this is since violators could setup an own instance which lies about the account age. Still quite the investment for ban evasion IMHO.