For the past 15 years, F-Droid has provided a safe and secure haven for Android users around the world to find and install free and open source apps. When co...
Some friends and I were talking about the feasibility of that earlier today.
It’s possible, assuming that you never need to use your phone as an MFA method, never need to scan a QR code, or never need to use an app for something because they lack a web version.
My company recently required us to have mandatory fun at a baseball stadium. Apparently, Ballpark MLB is the only way to receive tickets and get into the park… I had to sign up for some stupid account and download some stupid app because my company required it.
I could have technically said no… but I would have taken a hit politically. I’ve definitely been on teams where people have said “Oh, paequ2 doesn’t like us. He doesn’t want to hang out with us.” I mean, they’re not wrong. I don’t like people. But. You know. I still need people to review my PRs, approve them, ask them for help, ask them for pay bumps, etc.
Forgive me Lemmy for my moment of weakness. I’ll go off to the corner and practice some self flatulation.
Self flatulation is so unironically funny in this context.
I think you meant flagellation but really people are giving you more guff than you deserve over the situation. And your response was basically “well I’ll go fart by myself about it.” And like yeah, that’s about what all this is worth.
Lucky you can get away with that. My bank requires the app, without it you can’t even make transactions via the web UI because the 2FA is via their app. You can’t even order a new card or many times order a physical card via their web UI because they don’t bother sending you a physical thing anymore, intention being is that you add the card to Google pay for NFC and online payments and use it that way only. Everything is via the app. I actually have no idea what happens if I lose my phone, because as far as it has been made to appear my bank account is on my phone, there are no sign in details or anything of the sort, it’s either there or it isn’t.
Yeah good luck with that, most places have been cashless since the pandemic, and there are no banks that don’t do this, they’re required to have 2FA by regulatory compliance and they all implement it as apps to offset compliance costs with data harvesting.
I’ve not had that experience. Most of the places I go to or do business with prefer cash (most even charge for cards now), and my bank doesn’t do that stuff. If they do, I’ll just go to an FCU instead of a bank, since most of them do most of their business in-person.
This has come full circle because at my work, we refuse to buy hardware keys for employees because of the cost. Work is making them download Duo authenticator as the only means of MFA as well.
I hear you. My wife has also requested that I not deprecate certain proprietary apps until I can provide a good alternative that works on both Android and Apple. Last time was when we were traveling and wanted to share locations with each other in real time. I had to give WhatsApp location perms 🤮
Oh, I hear you there. I’ve had to give persistent location data to GMaps of all things, because she uses Apple and actually wanted me to get one of those devices just for location.
Note to self if that were to happen : OSHW SIM modem (or even eSIM) that forwards to whatever (API, email, etc) that then bridges to other networks.
I have a couple of PinePhone I could keep plugged in but otherwise any Android phone where one can load an .apk e.g. Termux could have a hook on SMS then forward accordingly.
Edit2: didn’t try it but https://alwaysconnected.eu/ proposes 1Gb for 1 year (probably already too much data… since one needs 0 if connected on RPi) for 14EUR and they sell a Huawei (not great but I imagine works well with the card) E3372 (no idea if it works well with Linux) for 60EUR.
When Android stops working properly, I’ll move back to a dumb/feature phone. My wife will hate it, but so be it.
Some friends and I were talking about the feasibility of that earlier today.
It’s possible, assuming that you never need to use your phone as an MFA method, never need to scan a QR code, or never need to use an app for something because they lack a web version.
My company recently required us to have mandatory fun at a baseball stadium. Apparently, Ballpark MLB is the only way to receive tickets and get into the park… I had to sign up for some stupid account and download some stupid app because my company required it.
The future is stupid.
What if you said no?
I could have technically said no… but I would have taken a hit politically. I’ve definitely been on teams where people have said “Oh, paequ2 doesn’t like us. He doesn’t want to hang out with us.” I mean, they’re not wrong. I don’t like people. But. You know. I still need people to review my PRs, approve them, ask them for help, ask them for pay bumps, etc.
Forgive me Lemmy for my moment of weakness. I’ll go off to the corner and practice some self flatulation.
Self flatulation is so unironically funny in this context. I think you meant flagellation but really people are giving you more guff than you deserve over the situation. And your response was basically “well I’ll go fart by myself about it.” And like yeah, that’s about what all this is worth.
I said what I said! I didn’t typo. 🏃💨
You’re going to go… fart on yourself?
rsync arch three times; $ man bash > /tmp/forgiven
I read all this in Lenny’s voice because of your pfp and it made it even better
Not judging you, it’s a balance. I play this game as well! Godspeed
If my employer wants me to use MFA, they can provide me the device.
This is exactly what a Yubikey is for. They’re phishing-resistant too, as opposed to TOTP codes.
I have tried to make the case for Yubikeys a hundred times. It’s officially not in the budget.
What a shame, they will lose much more to hacks
How about for any personal accounts?
My personal accounts do not use MFA of any kind and very few are tied to external accounts for any form of verification.
Lucky you can get away with that. My bank requires the app, without it you can’t even make transactions via the web UI because the 2FA is via their app. You can’t even order a new card or many times order a physical card via their web UI because they don’t bother sending you a physical thing anymore, intention being is that you add the card to Google pay for NFC and online payments and use it that way only. Everything is via the app. I actually have no idea what happens if I lose my phone, because as far as it has been made to appear my bank account is on my phone, there are no sign in details or anything of the sort, it’s either there or it isn’t.
If my bank ever changes to do that, I would immediately find a different bank. Then again, whenever it’s possible, I do business in cash.
Yeah good luck with that, most places have been cashless since the pandemic, and there are no banks that don’t do this, they’re required to have 2FA by regulatory compliance and they all implement it as apps to offset compliance costs with data harvesting.
I’ve not had that experience. Most of the places I go to or do business with prefer cash (most even charge for cards now), and my bank doesn’t do that stuff. If they do, I’ll just go to an FCU instead of a bank, since most of them do most of their business in-person.
QR wishes it can someday become as relevant as you’re giving it credit for. Haha.
There is Aegis for MFA. It’s much nicer than the closed proprietary ones.
Of course, if a job requires something incompatible, then I’ll let them buy me a dedicated device.
Some services threaten me with “there’s no web version”, but they never end up being someome I want to do any business with, anyway. ¯(°_o)/¯
But I do want a dumb flip phone again. They were cool.
This has come full circle because at my work, we refuse to buy hardware keys for employees because of the cost. Work is making them download Duo authenticator as the only means of MFA as well.
I hear you. My wife has also requested that I not deprecate certain proprietary apps until I can provide a good alternative that works on both Android and Apple. Last time was when we were traveling and wanted to share locations with each other in real time. I had to give WhatsApp location perms 🤮
Oh, I hear you there. I’ve had to give persistent location data to GMaps of all things, because she uses Apple and actually wanted me to get one of those devices just for location.
Pretty sure you can build and self-host an SMS-whatever-she-is-using (e.g. Signal, DeltaChat, etc) bridge if somehow SMS isn’t enough.
Note to self if that were to happen : OSHW SIM modem (or even eSIM) that forwards to whatever (API, email, etc) that then bridges to other networks.
I have a couple of PinePhone I could keep plugged in but otherwise any Android phone where one can load an
.apke.g. Termux could have a hook on SMS then forward accordingly.Edit: quick search, a 4G dongle costs ~20EUR today and for compatibility on e.g. a RPi https://forums.raspberrypi.com/viewtopic.php?t=210724 bother otherwise Ubuntu https://wiki.ubuntu.com/NetworkManager/Hardware/3G and example on Debian https://wiki.friendlyelec.com/wiki/index.php/How_to_use_4G_Module_on_Debian
Edit2: didn’t try it but https://alwaysconnected.eu/ proposes 1Gb for 1 year (probably already too much data… since one needs 0 if connected on RPi) for 14EUR and they sell a Huawei (not great but I imagine works well with the card) E3372 (no idea if it works well with Linux) for 60EUR.