For the past 15 years, F-Droidhas provided a safe and secure haven for Android users around the world tofind and install free and open source apps. When cont...
Some friends and I were talking about the feasibility of that earlier today.
It’s possible, assuming that you never need to use your phone as an MFA method, never need to scan a QR code, or never need to use an app for something because they lack a web version.
My company recently required us to have mandatory fun at a baseball stadium. Apparently, Ballpark MLB is the only way to receive tickets and get into the park… I had to sign up for some stupid account and download some stupid app because my company required it.
I could have technically said no… but I would have taken a hit politically. I’ve definitely been on teams where people have said “Oh, paequ2 doesn’t like us. He doesn’t want to hang out with us.” I mean, they’re not wrong. I don’t like people. But. You know. I still need people to review my PRs, approve them, ask them for help, ask them for pay bumps, etc.
Forgive me Lemmy for my moment of weakness. I’ll go off to the corner and practice some self flatulation.
Self flatulation is so unironically funny in this context.
I think you meant flagellation but really people are giving you more guff than you deserve over the situation. And your response was basically “well I’ll go fart by myself about it.” And like yeah, that’s about what all this is worth.
This has come full circle because at my work, we refuse to buy hardware keys for employees because of the cost. Work is making them download Duo authenticator as the only means of MFA as well.
Lucky you can get away with that. My bank requires the app, without it you can’t even make transactions via the web UI because the 2FA is via their app. You can’t even order a new card or many times order a physical card via their web UI because they don’t bother sending you a physical thing anymore, intention being is that you add the card to Google pay for NFC and online payments and use it that way only. Everything is via the app. I actually have no idea what happens if I lose my phone, because as far as it has been made to appear my bank account is on my phone, there are no sign in details or anything of the sort, it’s either there or it isn’t.
Some friends and I were talking about the feasibility of that earlier today.
It’s possible, assuming that you never need to use your phone as an MFA method, never need to scan a QR code, or never need to use an app for something because they lack a web version.
My company recently required us to have mandatory fun at a baseball stadium. Apparently, Ballpark MLB is the only way to receive tickets and get into the park… I had to sign up for some stupid account and download some stupid app because my company required it.
The future is stupid.
What if you said no?
I could have technically said no… but I would have taken a hit politically. I’ve definitely been on teams where people have said “Oh, paequ2 doesn’t like us. He doesn’t want to hang out with us.” I mean, they’re not wrong. I don’t like people. But. You know. I still need people to review my PRs, approve them, ask them for help, ask them for pay bumps, etc.
Forgive me Lemmy for my moment of weakness. I’ll go off to the corner and practice some self flatulation.
Not judging you, it’s a balance. I play this game as well! Godspeed
Self flatulation is so unironically funny in this context. I think you meant flagellation but really people are giving you more guff than you deserve over the situation. And your response was basically “well I’ll go fart by myself about it.” And like yeah, that’s about what all this is worth.
I said what I said! I didn’t typo. 🏃💨
You’re going to go… fart on yourself?
rsync arch three times; $ man bash > /tmp/forgiven
I read all this in Lenny’s voice because of your pfp and it made it even better
QR wishes it can someday become as relevant as you’re giving it credit for. Haha.
There is Aegis for MFA. It’s much nicer than the closed proprietary ones.
Of course, if a job requires something incompatible, then I’ll let them buy me a dedicated device.
Some services threaten me with “there’s no web version”, but they never end up being someome I want to do any business with, anyway. ¯(°_o)/¯
But I do want a dumb flip phone again. They were cool.
This has come full circle because at my work, we refuse to buy hardware keys for employees because of the cost. Work is making them download Duo authenticator as the only means of MFA as well.
If my employer wants me to use MFA, they can provide me the device.
This is exactly what a Yubikey is for. They’re phishing-resistant too, as opposed to TOTP codes.
I have tried to make the case for Yubikeys a hundred times. It’s officially not in the budget.
What a shame, they will lose much more to hacks
How about for any personal accounts?
My personal accounts do not use MFA of any kind and very few are tied to external accounts for any form of verification.
Lucky you can get away with that. My bank requires the app, without it you can’t even make transactions via the web UI because the 2FA is via their app. You can’t even order a new card or many times order a physical card via their web UI because they don’t bother sending you a physical thing anymore, intention being is that you add the card to Google pay for NFC and online payments and use it that way only. Everything is via the app. I actually have no idea what happens if I lose my phone, because as far as it has been made to appear my bank account is on my phone, there are no sign in details or anything of the sort, it’s either there or it isn’t.
If my bank ever changes to do that, I would immediately find a different bank. Then again, whenever it’s possible, I do business in cash.