Please enter your username.

Please enter your password.

Thanks! For your security, please enter your 2FA one-time token.

You haven't signed in in a while. We've sent a confirmation code to your phone.

We don't recognize this browser. Please enter the security code we sent to your email.

Is your phone number up to date? Please confirm it by entering the code we just sent.

Did your email change? If not, please call the phone number we emailed to you, then enter the number read to you.

Just to be sure it's you, we've gotten in touch with your mom. Next time you see her, please enter the six-digit code she gives you.

spent so long typing this that the website i'm dragging has auto logged me out
@eevee Went through one of those this week 🙄
@eevee There are times I wonder if some of these actions are disguised trolling for information. The email and SMS steps could be considered as “we want to make sure we are up to date” on this.
@fuzzface @eevee yeah, although I think the big annoyance they're complaining about is when you get an SMS code as a login challenge and the next screen is we need to verify your phone by sending you another SMS code, repeat for email.
@eevee it’s my doctors website 😣

@eevee

Now do the #HokeyPokey and turn yourself around...

@eevee and as for the payment site you were sent to halfway which has also pinged yr online bank as well as merchant to 2FA you..
@eevee Your mother has forgotten where she has written down the code. Mr. Resetti has been dispatched to deliver the code via semaphore
@leftbot @eevee Find the closest convenience store and buy exactly four eggs and three orange juices so the cashier will provide you the 8 digits you need for the next step
@eevee losing access to my account due to a Mom-in-the-middle attack
@bobayaga socially engineering you with a fake mom
@bobayaga @eevee yeah, that's particularly bad since bio-mom went to the Dark Side and I wouldn't trust her with the time of day...that would *literally* be a Mom-in-the-middle attack.
@bobayaga @eevee that is a sweet pun. Well done!
@eevee Oh my dog this sounds just like banking websites @.@
@dragonarchitect @eevee spouse changed her phone number, and id card so it doesn’t match what the bank has on record and couldn’t reset the online password after it expired. Her mother literally had to go to the branch where she opened the account …
I wish that was a joke.
@s4rkn yes. That’s where you recognize the real security expertise.
@eevee lets not forgot the code you yoused on the first phone you ever had.
@SorenApplicati1 @eevee or the printed reset codes that you now either A) can't find or B) can find multiple sheets, none of which say which site they're for and/or when they were printed.
@eevee
*mbwwhaahahahaaa.....*
@eevee And the icing on the cake is that all this two-factor authentication can be easily defeated with a simple cookie stealing attack.

@eevee The code we sent to your mother will expire in an hour.

You should phone your mother more often. She worries about you.

She hasn't even told you about the nice Mr. Bergman across the street's bunions yet and that was weeks ago.

@eevee it's been 30 days since you changed your password, please set a new password.

@maljx @eevee

  • No, you can't cycle your passwords for at least a year.
  • Hey we noticed you're just repeating the same suffix for your passwords. Please stop doing that.
  • Now you're increasing numbers. No.
  • Increasing them by 2 is just the same thing!
  • No, the Fibonacci sequence is in our deny list. Try something more clever.
  • Okay, wise guy, you're using prime number sequences now? We still detected them, hahah! Denied!
  • Sequences of pi digits now? Okay, FINE! But just this once! (And don't push your luck, PUNK!)
@eevee
My username is: the_streaker
My password is: 31st*Nakedness_÷
My MFA code is: 091 547
My credit card number is ....

@eevee

This notice is to inform you that your account was part of a breach of our servers...

@eevee From Twitter, but this one always got me
https://twitter.com/5tevieM/status/1333115413291552769
Stevie Martin (@5tevieM) on X

when you need to confirm you're not a robot

X (formerly Twitter)
@eevee To confirm your identity, please provide:
• the name of your first pet
• your favorite car
• your doctorate professor's home address
• the last 10 digits of your social security code
• images of the front and back of three credit cards with limits of at least 100k each
• where you hide the keys to your summer home
• and one of the one time use codes we mailed to you when you created the account in an envelope disguised as junk mail that you already threw out months ago
@eevee If you don't have one of these, please call customer support where if you sound enough like an angry white man our representatives will happily give you full access to the account.

@eevee Reminds me of this Loading Ready Run sketch: https://www.youtube.com/watch?v=R6ynbQcmXfs

(This is a good thing)

Crapshots Ep422 - The Factors

YouTube
@eevee You got lucky, there could have been traffic lights to captcha, too.
@eevee I get PTSD from reading this
@eevee Its very annoying, but we brought this on ourselves.
@eevee Go to the following address, ask the bartender for a "Snakey Pete" drink half and throw the other half away in the sink in the women's bathroom, take the briefcase you'll find under the sink to Vitaly at the "Shop and Save" on Madison and 12th, tell him that "Sammy wants to know the name of the girl you like..."
@eevee burn burn BURN IT ALL
@eevee I swear I understand the security needs of all this but good lord how maddening it is for anyone and even more for people not used to tech 😭

@eevee "Have I Reached The Party to Whom I Am Speaking?"

- Lily Tomlin as Ernestine

https://www.youtube.com/watch?v=ISZ9UOBwRFA

Phone Call to General Motors

YouTube
@eevee Please confirm you are human by rating these pieces of abstract art by most resemblance with a sodium-chloride crystal.
@eevee please tap to confirm on another device that must be manufactured by the same vendor
@eevee Hey, that was me a couple weeks ago! I was so happy when I got my desktop working, then spent two or three days signing into everything I use. It was maddening. And that's with a password manager!
@eevee Ain’t that the truth. Nintendo a while back insisted I set up 2FA on an account I hadn’t used in literally years.
@eevee all of this sounds better that the site telling you the password you kept in your password manager is wrong.
@eevee people with strong passwords should be able to skip all that extra stuff. i use a password manager so my passwords are strong and random enough.
@anders I use a notebook and a pen. It is the strongest password manager ever created, no need to worry about security issues.

I also use 2FA - slightly inconvenient, ik - and for those services I use with that, I keep their passwords in KeePass. I think it's the strongest security a normal user would need.

@eevee
@petrescatraian

@eevee
Well yeah offline passwords are definitely the ultimate method 😃

I think that's too inconvenient for me though 😁
@anders it is inconvenient, haha 😀)) it's too risky to carry that around. But I sign in at home whenever possible 😁

@eevee
@petrescatraian

@eevee

Yeah true haha. Do you do it for all passwords or just for critical ones such as finances? 😃
@anders all 😀))

@eevee
@petrescatraian

@eevee

Wow. That's very ambitious security-wise 😃
@anders I actually do have a sort of a "default password" that I use for services I am not really accessing that much, or at all, so that I can afford losing them. For others the password is generated automatically and I type it as mentioned 😁

@eevee