Hacker News new | ask | show | jobs
by smacktoward 4311 days ago
"Require 2FA for everybody, full stop" would do the trick.

The proposed solutions you outline all assume that "password + security question" is only an insecure system for celebrities. But we have enough experience by now to know it's an insecure system for everyone.
1 comments
enraged_camel 4311 days ago
>>"Require 2FA for everybody, full stop" would do the trick.

How do you require 2FA for the Find My iPhone application when the only context for using that application is one in which your phone is lost?

link
aganders3 4311 days ago
Most 2FA schemes give you some backup codes. I'm sure people use Find My iPhone differently, but it's not unreasonable to suspect them to be used rarely. Once your device is back in-hand you could generate a few new backup codes.
link