Earlier quoted context omitted.
TOTP doesn’t expose PII.
True, but the email required to enable it (arguably) is. Reddit is far from the worst offender in this area. I should have specified my opinion as a more general one.
Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
281–290 of 301 posts
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#282Earlier quoted context omitted.
Yup, I don't trust spez, I don't trust reddit's management (even less after the Chinese investments). This is a case to be cynical, reddit is not transparent and their leadership has been riddled with stupid politics, including the whole weird saga they did with Ellen Pao.
Ehh. Spez being human makes me inclined to trust him a little more. I’m neutral in politics, but editing those comments was objectively funny. Stupid, yes — astonishingly so. But it finally broke the illusion that users own their comments. That’s all it ever was: an illusion. I don’t trust authority in general. But given the choice between spez and musk, I’d take spez any day. He’s at least not hopped up on drugs run…
Then again, so did my last boss till i got to know him better
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#283Earlier quoted context omitted.
Reddit is a shady company. Doing everything they can on the browser experience including interrupting me while I'm typing to try to shunt me over to the app is shady. I don't want the app. I have clicked 'continue in browser' at least 200 times. My preference ought to be clear and recorded by now. I'd stop visiting altogether if I didn't have a general problem with compulsive browsing.
Reddit pushing their app so hard annoys the hell out of me too, but what are they doing that qualifies as "shady"?
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#284Earlier quoted context omitted.
My Reddit account got hacked a few years ago because I created a Reddit account using a throwaway password, since I didn't care much about Reddit when I started. The hacker started using it to promote crypto. I was able to get the old account disabled, but couldn't get it back because I couldn't prove I'd ever owned it. So I created a new account, and it wasn't a big deal, but I was annoyed that I lost my preferred u…
I’m not following, how did a throwaway password get you hacked? Did they use a common password leak list to guess via bruteforcing? Does Reddit not rate limit login attempts?
I don't do that anymore.
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#285Earlier quoted context omitted.
My Reddit account got hacked a few years ago because I created a Reddit account using a throwaway password, since I didn't care much about Reddit when I started. The hacker started using it to promote crypto. I was able to get the old account disabled, but couldn't get it back because I couldn't prove I'd ever owned it. So I created a new account, and it wasn't a big deal, but I was annoyed that I lost my preferred u…
> Don't get the privacy concerns. I'm totally fine if people know what I post on Reddit. Good for you. But for others, pseudonimity is a way of protecting themselves in real life. There are people who cannot express their views on certain subjects without inviting scrutiny, or even danger, in their real lives. > It's public. There are private subreddits.
I've never used a private subreddit, but I imagine it might be hard to get back in after your account got hacked?
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#286Earlier quoted context omitted.
If someone _really_ wants in, the windows are an even weaker point. Obvious at a glance breakage probably not even necessary... (those latches seem awfully flimsy).
Would a keychain window breaker (sold as an emergency escape for a car) work on home windows? Or is the glass handled differently somehow?
The safety glass in cars is especially difficult where I expect much less from that in a home.
With the obsession over insulation I suspect they're stronger than I remember, but brute force always works - if not, just use more. Maybe introduce leverage
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#287Earlier quoted context omitted.
TOTP doesn’t expose PII.
Don't you need to send the generator hardware dongle thingy (whatever it is called in English) to the user?
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#288Earlier quoted context omitted.
>Yup, I don't trust spez, I don't trust reddit's management (even less after the Chinese investments) I think you (and many other people) are overestimating how much chinese influence there is on reddit, considering that they have < 10% stake (according to wikipedia they "led" a funding round that raised 10% of valuation, and since then there was another funding round that presumably diluted their stake).
Above 0 is too much. Could 10% buy you mod spot over a large major subreddit? Maybe get reddit to look the other way for your astroturf campaigns? Reddit is just as shady with its Overton Window manipulation tactics & strategies as Twitter has been exposed to be. Remember when Ghislaine Maxwell was revealed as a mod of r/Worldnews? I'm convinced any relevant PR company worth its salt has infiltrated moderator teams o…
That's... not how fundraising rounds usually work.
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#289Earlier quoted context omitted.
>Ah the classic PR blur. Could mean anything from "all good" to "we don't log - ignorance is bliss". After what lastpass did I cannot trust any self reporting.
I think this is overly pessimistic. While there's definitely shady companies out there who will say this while having very poor security practices, it's tricky demonstrating that something didn't happen. Say you had detailed audit logs for example. What happens if there's a subtle bug in those systems that allowed the hacker to proceed without logs being recorded?
Re: Reddit Confirms It Was Hacked–Recommends Users Set Up 2FA
#290Earlier quoted context omitted.
I have that and do that, but it doesn't solve the Google Drive thing.
You can create a new Google account tied to your domain and use that to collaborate with others. You can elect to stop using Gmail and your old nickname, unless I’ve missed something.