Loading…
7
I ignored the 2FA nags for my work email until a Friday night at the shop
Everyone in my store keeps saying 2FA on the work email is overkill, and I believed it until last Friday. I was closing alone around 9pm when I got a login alert from a city I have never been to, and the password on that account was the same one I use for a forum I signed up for back in 2019. I killed the account, reset everything, and turned on the app based codes right there at the counter. My hot take is that most of us dont get hacked by geniuses, we get lazy with reuse. Anyone fighting a boss who says auth apps are too much hassle for a small crew?
2 comments
Log in to join the discussion
Log In2 Comments
ruby_henderson361mo ago
Doubt the city alert was even real. Most of those "login from somewhere else" emails are just bots spraying common passwords at your address, and the mail comes from your own provider trying to scare you into clicking a link. If the password was the leaked one from that old forum, yeah, change it, but that does not mean someone actually got into your work mail, and it does not mean the whole crew needs an app on their phone to punch in for a shift. Forcing 2FA on a small store crew is how you end up with people locked out on a busy Saturday because their phone died or they got a new number, and then you are the one resetting accounts all day instead of running the register. You got lucky with a scare, not hacked by a mastermind, and now you want to make everyone else's day harder over it.
6
spencer_park261mo ago
Eh, 2FA on shared work accounts saved my old job more than once.
5