@jackie@social.linux.pizza2026-08-07 16:36:18
made something cursed (hide data in fake 2FA codes) https://git.sr.ht/~jackiejude/fake-2fa-codes
@jackie@social.linux.pizza2026-08-07 16:36:18
@philip@mastodon.mallegolhansen.com2026-10-07 14:12:32
@… 2FA: One factor is our email service working, the other is you having access to the receiving account.
@trezzer@social.linux.pizza2026-09-06 23:08:26
I want to throw companies who force login via emailed timed codes over a bridge. If they only have a username/e-mail field without a password field ready right away, I want to light them on fire. If they offer the option to add TOTP 2FA but still do the previous two, I want to crush them in one of those things for compacting trash. Kickstarter would be a little burning cube falling from a bridge, incidentally.
@Techmeme@techhub.social2026-08-01 18:01:26
Officials: the scope of cyberattacks on US water systems now includes at least seven states and may be far wider; MN was just the first to publicly report them (New York Times)
https://www.nytimes.com/2026/08/01/us/poli
@lapizistik@social.tchncs.de2026-08-06 09:45:30
Wir werfen mit tollen Begriffen wie 2fa und Passkeys und anderen technischen Lösungen, und das mag alles fein sein, aber im Grunde fühlt es sich in der Praxis kompliziert und vor allem für Laien nicht wirklich verständlich an, und zum anderen haben wir an zig Stellen unterschiedlichen Kram, der sich anders verhält, und dem gewöhnlichen User zu viel zumutet.
Im Grunde fehlt uns ein Ort, um unter eigener Kontrolle einfach und für Laien nachvollziehbar Private Keys¹ ablegen zu können – un…
@mela@zusammenkunft.net2026-08-04 23:18:01
Sehr cool. Ich komme nicht an meinen Postcode-Account, weil sie zwar 2FA anbieten, aber die Mail nicht ankommt. 😑
@Mediagazer@mstdn.social2026-08-01 17:36:06
Sources: the DOJ issued a subpoena to NYT freelancer Matthew Cole, seeking to force him to reveal his sources about a failed top secret mission in North Korea (Devlin Barrett/New York Times)
https://www.n…
@toxi@mastodon.thi.ng2026-09-23 09:27:47
Just published a new comment on the NPM discussion page about upcoming phase out of 2FA tokens for direct publishing and the dire consequences this will have on many projects (including ~220 of my own packages). I'd appreciate if more people impacted by these changes are making their voices heard, before it's too late...
@Erikmitk@mastodon.gamedev.place2026-10-04 18:41:10
I’m doing tech support for my mother-in-law because Google thinks she’s a bot and keeps closing up her gmail account.
She handed me her ziplock bag of passwords and her old phone for 2FA.
@waidler@bayerwald.social2026-09-01 20:12:49
Die Instanz https://bayerwald.social läuft jetzt mit Softwareversion v4.7.1
https://github.com/mastodon/mastodon/r
@bencurthoys@mastodon.social2026-10-07 11:55:50
One of my daughters (account REDACTED1) can't log in to Roblox on her Amazon tablet. Her account is linked to mine and I can see it in the parental controls. When she enters her password she gets a 2FA challenge, which offers to send an email. I have tried her email address and my email address and my phone number, and I still don't get any email.
@crell@phpc.social2026-09-24 14:38:32
Write comment on random blog.
Get asked to login to Wordpress.com (where it's hosted, though that's not obvious) to do so.
Password isn't in my manager, because it's not a wordpress.com domain.
Reset password.
NOW on wordpress.com, my old password is in my manager. But I have to use a different one.
Also do 2FA multiple times.
Now log in with the new password.
Go back to the site I was trying to post on... my post has long since been…
@iam_jfnklstrm@social.linux.pizza2026-09-23 11:30:12
Updated, rebooted and now outlook can't connect to server. 2FA don't unlock. Does it mean that I should use the vaccum cleaner instead? Ps, sending a ticket needs e-mail so that door is closed. Call? 😂 what supportdesk have phones???
@toxi@mastodon.thi.ng2026-07-20 09:44:17
TIL that I've actually created a few "high impact" packages on NPM (with 1 million downloads per week)... Just got this email from them (see screenshot)
If each one of these would just pay me $0.001, I could actually comfortably dedicate myself full time to these projects (which has been my long, long dream job). But the system and social contract around open source is completely broken and so I've to balance my time and try to sustain myself and my family via other ways for periods o…
@memeorandum@universeodon.com2026-08-01 18:30:59
The U.S. Deported Him to Jail in Russia. Then He Escaped. (New York Times)
https://www.nytimes.com/2026/08/01/world/europe/russia-war-deserter.html?unlocked_article_code=1.2FA.eJTY.ZtuqxbLN2SRX&smid=nytcore-ios-share
http://www.memeorandum.com/260801/p41#a260801p41
@colinpurrington@flipping.rocks2026-08-01 10:47:59
@bencurthoys@mastodon.social2026-10-07 11:55:54
When I just ask for an email-based login link to my email address, I can see options to sign in as me, and as my other daughter (account REDACTED2) but not the REDACTED1 account.
What is wrong with the REDACTED1 account? I can't find anywhere in the parental control UI to allows me to turn 2FA on or off.
@metacurity@infosec.exchange2026-08-01 14:51:10
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
https://www.nytimes.com/2026/08/01/us/politics/scope-of-hacks-on-us-water-supply-widens-as-evidence-points-to-iran.html?unlocked_article_code=1.2FA.k92q.frV8abocJAzk&smid=url-share
@Techmeme@techhub.social2026-08-19 05:11:13
FDM CCS Insight: ~134M travel eSIMs will be used in 2026, up from 101.8M in 2025, challenging established carriers that generate 3%-5% of revenue from roaming (Kieran Smith/Financial Times)
https://www.ft.com/content/64ede483-c179-42fa-8fd2-f13b13cbd8ad
@toxi@mastodon.thi.ng2026-09-23 09:35:10
More NPM troubles: Anyone else been getting 404s when trying to publish to NPM in recent days? I hope they're not messing with the 2FA publish token workflow already. I was banking on having another 3 months before their proposed sh*t[1] hits the fan...
(Trying to share, helping others and publishing open source is becoming an ever increasing burden... 😭)
[1] https://…
@crell@phpc.social2026-08-13 15:16:09
@memeorandum@universeodon.com2026-08-01 20:30:54
As Cease-Fire Teetered, Iran Plotted a Wider War With Aid of Its Proxies (New York Times)
https://www.nytimes.com/2026/08/01/world/middleeast/iran-proxies-war-oil.html?unlocked_article_code=1.2FA.W2My.4yFC1sz3jI5J&smid=url-share
http://www.memeorandum.com/260801/p44#a260801p44
@Techmeme@techhub.social2026-07-16 13:20:43
1Password launches a new Claude integration for Mac that lets Anthropic's AI agent sign in to websites without seeing the user's password or 2FA code (Zac Hall/9to5Mac)
https://9to5mac.com/2026/07/16/1password-now-lets-claud…
@jtk@infosec.exchange2026-07-31 05:03:46
Received email spam from newly registered socialdb [dot] xyz. Some kind of escrow racket for wannabe influencers.
Looks like if they find an email associated with your Mastodon account you'lll get subscribed to their mailing list.
Platform allows you to create an account using an email without verification and set 2fa via Tor. Just saying.
@memeorandum@universeodon.com2026-08-01 22:55:55
Vincent Pastore, Whose 'Sopranos' Character Ratted Out Tony, Dies at 80 (Clay Risen/New York Times)
https://www.nytimes.com/2026/08/01/arts/television/vincent-pastore-dead.html?unlocked_article_code=1.2FA.wff7.h8LGHeBMYNMG&smid=url-share
http://www.memeorandum.com/260801/p53#a260801p53
@Hans5958@mastodon.social2026-08-15 17:01:44
It's to the point that I'd rather have 2FA with my phone app just to avoid it, which I did when osu! introduced 2FA. I mean, shit, man. If there is a passkey option, I would do it, even if I can't do it on my phone since it is kind of old.
#Trakt
@metacurity@infosec.exchange2026-08-26 13:42:25
You won't want to miss today's Metacurity for the most critical infosec developments you should know, including
--OpenAI disrupted an elaborate Russian influence operation,
--Cyberattack disrupts Boston Scientific worldwide,
--Man accused of impersonating NSA hacking chief,
--Hackers steal confidential Nutex data,
--LACMA breach exposed sensitive personal data,
--Akira-linked attack hits benefits provider Paylogix,
--CISA red team exposes tale of two defenses,
--CISA pushes agencies to strengthen security logging,
--Hackers turn npm mirrors into phishing hosts,
--New loader delivers Amatera through fake CAPTCHAs,
--AI malware remains mostly stuck in the lab,
--Army moves cloud management under Cyber Command,
--WhatsApp strengthens 2FA and passkey security,
--ChatGPT Work can now handle authenticated tasks,
--Parking service breach exposes 73,000 payment cards,
--Hackers hijack Kylie Jenner’s X account for crypto scam,
--AI security startup Alice raises $140 million,
--Meta settles child-addiction claims for up to $17.1 billion,
--No, hackers didn’t steal a gazillion passwords,
--ICE seeks access to nationwide voter data
https://www.metacurity.com/openai-disrupted-an-elaborate-russian-influence-operation/
@openolat@mastodon.social2026-08-21 08:53:51
➤ OpenOlat 21.0 major release is out
Learning and coaching areas separated, new Rooms module with booking, Course Planner automation and to-dos, Word/Markdown import, AI essay questions with grading and formative feedback, new "Gap mixed" question type, 2FA one time code and much more.
#OSS #LMS #elearning #eAssessment #OLAT
