Write them all down on the first day, then just reuse the list. Don't get caught.
Its gotta suck to be the guy who has to text out all the two-factor authentication codes.
a year ago by Clinicallydepressedpoochie to c/showerthoughts
Write them all down on the first day, then just reuse the list. Don't get caught.
8675309......dammit, thats too many numbers....
How do you know my Lemmy password?
Sounds exhausting
Nah, just roll some dice: http://gamesbyemail.com/news/diceomatic
Yeah those 2FA guys have it the worst
I have actually have the codes in two different apps since ones behind an account so not only does the little elf in my phone have the to think of new numbers he has to make sure the numbers are synced up
Reminds of of these 
Stunning
At least we know where he got them ...
I hate to tell you this, but it’s a factory full of children in China. Those tiny fingers can churn out the codes.
Hopefully soon AI will arrive and save them poor children from that awful life.
Bit like Thatcher did for British miners…..
at some point, he just started smashing his head on the keyboard
Me too thanks
ya'll are weird this is how i get income i have an offshore account teeming with crypto from my two-factor homey just gotta take a shit over there in that bush right now
Fun fact those are actually emailed most of the time. MMS format your phonenumber@carrier.tld
Which is why they can sometimes get delayed for hours
Deeply incorrect as most carriers have the SMS/MMS gateways disabled by default. Eg, you have to enable that function on Verizon. Also you'd see an email as the sending party, not a phone number/shortcode
You can use something and still fundamentally not understand it...
Here's an example of a message that's send the way you describe. Note the fully shown email address in the from field at the top.

And here's a real 2fa short code message. This was not send via email, this was a registered shortcode number that would be registered with your telephone provider.

Notice that the real 2fa message doesn't show a full email address as the sender?
If your company is relying on the sms/mms mail gateways, then you are not going to be able to reach most of your clients. Here's the top 5 carriers in the USA.
Verizon (146 Million users) was opt-in for me (I had to turn it on in order to get my cloudflare alerts to work, can't rely on email when I'm specifically monitoring the email server). For those who have Verizon, text "status" to 4040 to see if your gateway is active! (https://www.verizon.com/...). Though it is entirely possible that it's no longer opt-in or has changed defaults over time... possible even repeatedly, my account is very old...
T-mobile's (131 million users) gateway is opt-out last I checked. Meaning that a lot of people will find it once after getting some spam and turn it off.
ATT (118 million users) turned theirs off outright... https://www.att.com/...
Boost (7 million) mobile relies on AT&T... See above.
US Cellular (4.4 million) - looks like it's working.
These are the five biggest carriers in the USA, with 3 of them default to "no"... If you're trusting this function to work for your users, then you're in the wrong from an IT perspective.
Another reason you know that most companies do not use this mechanism for 2fa... 2fa pins expire. Can't send 2fa pins that take "A couple of hours" to arrive when that pin expires in 10-15 minutes for most services.
Most sms texts come from registered services like twilio (https://www.twilio.com/...), ez texting, salesmsg, textmagic, simple texting, slicktext, textla, etc... For the ones I've interacted with, you use their APIs to send messages, and the messages always come from a shortcode or normal phone number, never from an email address. I've never... ever ever... received an MFA pin from an email address. Always short codes or full phone numbers.
Edit: typo
You have typed a lot to not have made an impact at all. The entire Crux of your argument is that you don't see the message arrive as an email. That would be because it gets translated from email format to mms before it arrives on your end. Yes receiving a code 4 hours after is a problem, no the code will not work at that point. Again I do not know the specifics of how it operates on the back end once it is sent out but please do not try to talk down to me about how one of the duties at my job works. I highly doubt your assumptions are correct as I use the service to send 2fa weekly while on live calls with cx. I have never once stopped to ask which phone carrier the cx is using. Many of my company's clients are international.... Yet mysteriously they can all receive the texts that I'm sending via an email. However there have been some cases with super small regional carriers where the message is massively delayed.
The people who downvoted this are the same people that I think Puscifer were singing about in "The Remedy".
My guy was really lazy the other day. He just sent me back my phone number as a code.
@lemmy.world
A "Showerthought" is a simple term used to describe the thoughts that pop into your head while you're doing everyday things like taking a shower, driving, or just daydreaming. The most popular seem to be lighthearted clever little truths, hidden in daily life.
Here are some examples to inspire your own showerthoughts:
If you made it this far, showerthoughts is accepting new mods. This community is generally tame so its not a lot of work, but having a few more mods would help reports get addressed a little sooner.
Whats it like to be a mod? Reports just show up as messages in your Lemmy inbox, and if a different mod has already addressed the report, the message goes away and you never worry about it.
go to feed...
@lemmy.world
A "Showerthought" is a simple term used to describe the thoughts that pop into your head while you're doing everyday things like taking a shower, driving, or just daydreaming. The most popular seem to be lighthearted clever little truths, hidden in daily life.
Here are some examples to inspire your own showerthoughts:
If you made it this far, showerthoughts is accepting new mods. This community is generally tame so its not a lot of work, but having a few more mods would help reports get addressed a little sooner.
Whats it like to be a mod? Reports just show up as messages in your Lemmy inbox, and if a different mod has already addressed the report, the message goes away and you never worry about it.
go to feed...
Imagine having to think of a new 6-digit number every few seconds!
save