Settings and activity
14 results found
-
1,190 votes
We’re reviewing this. Curious how long you think would be ok.
An error occurred while saving the comment SabinFails supported this idea · -
346 votes
An error occurred while saving the comment SabinFails commented@darq_bot_ I would like to add to boosted_n's comment here. I have also been an Internet user since the so-called AOL Era.I used to claim that I have heard the modem handshake noises so often that I could actually understand their language, lol. Your/our Internet chops are not in question.
I have also never had an account compromised. I would venture to say that a majority (or at least a vast plurality) of people born before 1980 could make the same claim. There are many reasons for this, such as people in our age group being more naturally cynical and skeptical (having lived a pre-Social-Media life). Or, maybe it's just that nobody has been motivated enough to go after our accounts because we aren't important or interesting enough. Or, maybe our tie just hasn't come.
The time to make the move toward 2FA-enabled accounts is before an account is compromised. As a security professional (both physical and cyber), there is an adage much older than I am: the time to get security is before you needed it. And, there is the related adage: experience is what you get 10 seconds after you needed it.
I am not saying that your account(s) will ever be compromised. Streamers are heightened targets, as are anyone who is prolific on Social Media or otherwise can be seen to hold accounts or value (financial or otherwise). It is perfectly reasonable to employ enhanced security measures to act as a counterbalance to that phenomenon.
In our era, this "enhanced security" took the form of "your password must have both letters and numbers" and gradually got more complex from there. Some "experts" are still wallowing in this camp, now asking for 10+ character passwords with so many r3Q1remEn7$ that they've lost all meaning and don't add much (if anything) to the actual security of the account. 2FA standards have come a long way in closing that gap by adding an entirely separate second factor (your device/s) which has been shown to reliably foil any hack attempt unless the attacker can somehow acquire both the password AND access to the second device, which is nearly impossible in most cases. NOT impossible, but nearly so for all practical purposes.
With all that said, I DO agree with you that requiring a phone number is silly. SMS is not a secure protocol, and using SMS for 2FA is about as useless as early CAPTCHA designs. I do agree, however, that it's a good idea to have a backup method of authentication, such as a second separate device, a secure email account, or even SMS if there is a human verifier in the loop to prevent cleverly-designed bots.
In the end, we should be thankful that Twitch, Google, and our banks are increasingly requiring 2FA and improving their implementations. As a person from your generation, I hope you can see this point of view.
SabinFails supported this idea · -
160 votesSabinFails supported this idea ·
-
21 votesSabinFails supported this idea ·
-
64 votesSabinFails supported this idea ·
-
31 votesSabinFails supported this idea ·
-
49 votesSabinFails supported this idea ·
-
10 votes
An error occurred while saving the comment SabinFails commentedAs an affiliate, I'm sure this makes a lot of sense to you. But for the majority of us who are not affiliates yet, this locks us out of the ability to brand our stream and build that brand into a successful affiliate-worthy channel. Your idea is good for users who are already affiliates, but very BAD for streamers who want to grow to that level. SabinJr is a personality, but xBB3fp8Ry has no chance to grow.
But besides that, Twitch is a social platform. This isn't 4chan where Anon rules the house. We have names, identities, and friends. Our username is what we are called when we see our friends in chat, and it's what streamers call us when they see us in chat. If I stop being SabinJr and just be xBB3fp8Ry, it will be impersonal and boring. Most people would leave Twitch, I think.
-
136 votesSabinFails supported this idea ·
-
259 votesSabinFails supported this idea ·
-
234 votesSabinFails supported this idea ·
-
164 votesSabinFails supported this idea ·
-
224 votesSabinFails supported this idea ·
-
412 votesSabinFails supported this idea ·
Part of the problem is that people are going to the profile page to see when they were last active, and the act of viewing the page causes the timer to reset.