Quote (Cheetos @ Dec 5 2018 12:42am)

is that how you got this account? :rofl:

Quote (Caulder10 @ Dec 5 2018 08:24am)

hell no
can't use a cellphone where I use a pc so would never be able to get on.

Quote (FreeUsername @ Dec 6 2018 07:33am)

Its a forum, not a bank.

Quote (ium @ Dec 5 2018 07:10am)

That is very true! Just as much as if someone got access to your email (which is protected by only one password) they can verify your 2 FA. If you use 2FA on the cellphone you are absolutely protected, but once you lose your
phone number, then you can just imagine the procedure to verify that you are the rightful owner of your d2jsp account.

How are people going to guess two passwords without your computer being compromised? And if your computer is compromised, then they can steal your web-session and use your account without a password. Which means
a 2FA is useless unless you have a gold password combined OR require it every time you send FG.


Does Google 2-step verification protect user from session hijacking?
- Short answer: Yes, the attacker can use session hijacking.

source: https://security.stackexchange.com/questions/56555/does-google-2-step-verification-protect-user-from-session-hijacking

Quote (Caulder10 @ Dec 5 2018 08:24am)

How are people going to guess two passwords without your computer being compromised? And if your computer is compromised, then they can steal your web-session and use your account without a password. Which means
a 2FA is useless unless you have a gold password combined OR require it every time you send FG.

Quote (xXZyZXx @ 7 Dec 2018 05:34)

This kind of backwards attitude really hinders progress.

Quote (ium @ Dec 5 2018 06:54am)

Gold password is a million times better, in my books.

2 FA is lame and time consuming... People will have problems when they change emails & phone numbers, etc. I also don't like to rely on google to not charge for this service in the future...

Big and firm No - I don't like to rely on external technique .

Quote (FreeUsername @ Dec 12 2018 03:16am)

And this kind of stuff is exactly the type that break in future compatibility. It gives more maintenance and more can break.

Quote (FreeUsername @ Dec 12 2018 03:16am)

Personally i use a password manager that has 2FA, so to obtain my pw, i need already 2 device's. That being said, if you prefer this kind of methods like 2FA, you already can implement it yourself.

Quote (Cocoo @ Dec 12 2018 09:42am)

Voted NULL because forcing it upon people is a pain, but it would be nice for those who feel like they need to be in control. Would be cool if you could link it to a Gmail or something as I know the API exists but it's entirely up to Njaguar :)