Since the topic of SMS TFA has arisen on the bird site, does this seem like a problem for anyone else, if you've opted for app-based or key-based TFA?

I mean, it would be nice to be able to get account notifications via text, but I don't want to introduce an SMS vulnerability just to be able to receive those notifications.

I see similar preferences presented in many companies' threat models, and considering what seems like common knowledge within the infosec community, I have to wonder why this is still a discussion. If a better TFA option has been chosen, why not use it first?

I'm quite shocked that this song somehow slipped off my workout playlist. Rectified this oversight today.

https://youtu.be/AkFqg5wAuFk

Today I finalized a settlement to the lawsuit brought by Dr. Lee Johnson of Tillamook Vision Center, against both my company, Harmonium, and me personally (despite the corporate veil), which has been going on for over 2 years. The parties involved in these proceedings are on public record, since the cases were brought against us in Tillamook County Circuit Court.

The summary:
- The facts don't matter.
- Written, formalized contracts and associated legal agreements don't matter.
- Having all relevant witnesses testify in your behalf, doesn't matter.
- Supremely qualified expert peer reviews and related testimony doesn't matter.
- Your performance, even if conducted to the letter of the law and all regulations involved, doesn't matter.

The only things that matter, are money; and who the person presiding over the case decides they can more closely relate to, or they like better, for whatever reason.

The rest, is apparently meaningless.