Downtime, bugs, and failures on any kind of service (email, web, XMPP, etc) 🖧🔌🐞

68 readers

2 users here now

Report problems with a service here that is unrelated to user-controlled client side software. Thus servers and web clients are fair game. This is a catch-all for situations not accommodated by the following related communities:

!bugs@sopuli.xyz - for bugs in third-party software apps
!isitdown@infosec.pub - for downtime status on Lemmy instances specifically (although they accept reports on any fedi node)
!assholedesign_web@infosec.pub - for deliberate enshitification of web services specifically

founded 2 years ago

MODERATORS

freedomPusher@sopuli.xyz

-1

2fa.directory is blind to Cloudflare. Deceives users into a false sense of security. (self.bugs_in_services)

submitted 2 weeks ago* (last edited 2 weeks ago) by evenwicht to c/bugs_in_services@sopuli.xyz

0 comments fedilink hide all child comments

2fa.directory catalogs services that use multifactor authentication. Of course the idea is to inform consumers of which services satisfy a basic standard of security. Services that are centralised on Cloudflare appear with a green checkmark, as if there is nothing wrong with sharing all your login details with a privacy abusing fiefdom in a country without privacy safeguards through a MitM arrangement.

If one of the auth factors has a MitM, that’s effectively 1 factor less. 2fa becomes like 1fa.

It’s a gross oversight and the bug tracker is limited to MS Github users. A Github user should raise an issue to point this out.

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here