Ask your instance administrator.
this post was submitted on 09 Aug 2024
-8 points (33.3% liked)
Ask Lemmy
26707 readers
1413 users here now
A Fediverse community for open-ended, thought provoking questions
Please don't post about US Politics.
Rules: (interactive)
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected].
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.
Reminder: The terms of service apply here too.
Partnered Communities:
Logo design credit goes to: tubbadu
founded 1 year ago
MODERATORS
This was unfortunately an error on our end.
Please bear with us while we work on resolving this situation.
2FA has been restored for all LW users that had it enabled before and didn't reactivate it on their own since.
There will be an announcement posted later on explaining what happened.
edit: announcement is out: https://lemmy.world/post/18503967
ITT OP learns that 2FA is just a token stored on a server, and that server is in control by other people
This is what I thought. I keep telling people they don't exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don't even matter since the admin could also bypass that. Tanks for the validation.
And you better pray the website owner (websites in general, not Lemmy specifically) at least hashes your password.
yes, the more layers of security, the better, even if it is just a futile matter of time to consume the time of an ATP.
The server owner has complete control of your account.
They could very easily take control completely if they want.
This is what I thought. I keep telling people they don't exclusively own their passwords / security tokens once they give it to a site.
If I shared encrypted info that I kept encrypted, I guess it would still be mine but no one could then read it.
Going to need a lot more context than that.
I'm sure site admins could just clear the 2FA field if they wanted. Would they? IDK, probably not unless they had good reason.
Could someone steal your session information and disable your 2FA with that? Yeah, but I doubt they did, you'd have to have your system compromised or some kind of cross site scripting.
Did you use any shady lemmy clients?
etc
No, nothing shady. Just was notified there was a mistake on the server end. Perhaps tmi to elaborate...
Locking as this question violates rule 5.