• Mike@lemmy.ml
    link
    fedilink
    English
    arrow-up
    17
    ·
    8 months ago

    Ya know, I have no issues with 2fa, but I watch older folks struggle with it for some reason. They can’t fathom the ‘magic’. But I don’t understand 2fa on utility websites that are only payment portals that obfuscate account numbers. Like “enable 2fa for account security!” why? Because someone who has found my credentials on the dark web might pay my bill?

    • Lesrid@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 months ago

      I’m also trying to find the angle on it. Like with my ISP I guess someone could have my password but not necessarily my address? So from the ISP site they could peek at my address??? I’m not even sure it has my address unobfuscated but I figure it must somewhere, like “view this bill”.

      • brianorca@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        8 months ago

        A lot of ISPs provide email, too. So getting an ISP password lets them reset your other passwords which used that email address for the “forgot password” prompt. (I’m guessing you don’t use your ISP provided email, but you’re not “most people”.)