My bank just emailed me to say that because I haven’t used my two factor auth recently (they only require it for specific actions), they’re disabling it on my account.

What kind of a batshit security posture is that?!!

@s0 Sadly I've seen worse. Had an account that wouldn't let me log in without e-mail verification, despite acknowledging I had two factor authentication, because it couldn't verify that the two factor authentication was secure.

It's because they only "approved" of Google Auth and I used Ente Auth, so they treated my two factor auth as invalid.
@thatgalsilver @s0 ah yes, insecure OTPs vs. Secure OTPs

bweh