To giant tech corpos, lack of extra data for them to harvest is considered “suspicious”.
I know, 2fa is generally good. But fucks sake MS, lack of it isn’t because I’m “up to something” or some shit. Like, right now I have no working phone number so I can’t use that.
The worst websites are the ones that will let you set up a TOTP only after you’ve given them a phone number and verified it. Like, my phone number doesn’t mean anything. They can’t possibly know that it’s my number and not someone else’s. How’s that supposed to “verify my identity”? Yeah, it’s all just to harvest data, but their story doesn’t even make sense!
They do, but before you can set that up, you need to gain access to your account again, and to do that, they want a phone number to “verify” that you’re a real human or something. I just gave them one from a “receive SMSes online” website (because I only had my personal number at the time), turned on TOTP, and haven’t had any issues since. And if they ever try to ask for my phone number again, I’ll give them one of the numbers that I use for services that don’t need my phone number but still want it.
To giant tech corpos, lack of extra data for them to harvest is considered “suspicious”.
I know, 2fa is generally good. But fucks sake MS, lack of it isn’t because I’m “up to something” or some shit. Like, right now I have no working phone number so I can’t use that.
The worst websites are the ones that will let you set up a TOTP only after you’ve given them a phone number and verified it. Like, my phone number doesn’t mean anything. They can’t possibly know that it’s my number and not someone else’s. How’s that supposed to “verify my identity”? Yeah, it’s all just to harvest data, but their story doesn’t even make sense!
They don’t let you use a time based one time password?
They do, but before you can set that up, you need to gain access to your account again, and to do that, they want a phone number to “verify” that you’re a real human or something. I just gave them one from a “receive SMSes online” website (because I only had my personal number at the time), turned on TOTP, and haven’t had any issues since. And if they ever try to ask for my phone number again, I’ll give them one of the numbers that I use for services that don’t need my phone number but still want it.