feature for monero forum

@UsualCat Yeah the admin is working on a solution right now. Actually I almost lost my account here because I got locked out by broken 2FA email.

@UsualCat I'd rather just have username and password to be honest, whats all the noise about security when the threat is like nothing. Steal my account if that really makes you happy.

@Nebuchadnezzar_II to be honest, we may had differ mentality, i mean look. i rather had 0 account breach than one alter account got hacked by someone, its not about worth or isn't. imagine we using monero for privacy and all the sudden we doesn't care about security because "yeah its just some forum online" welp just different mentality some ppl okay with it getting hacked and other ppl just want his account not belong to the street

@sepia lol that's wild, i almost turned on my 2fa email. funny enough i cancel it on last second,

@UsualCat
If my account belong to the street that'd be funny. I'd enjoy to see the choas.
It all depends on the threat model, no? Sadly I don't think anyone want to impersonate my dumbass.

But yh I think we have a different mentality. I think all this privacy/security on every bloody thing is insane. Sometimes I go OTT with opsec but only when the risk is truly terrible.

In fact, I was thinking of a security situation, which you might find funny.
Giving the cops a duress password which wipes your data is both highly suspicious and probably illegal. A better solution would be a duress password which loads a decoy filesystem which is full of insane fetish porn and decoy wallets with small sacrificial monies. This is actually possible with VeraCrypt which you can put on the same memory stick as tails, which is super useful. If the cops steal my stick and I give them that password then any suspicion of worse shit / more monies is evaded because they think I'm just some weirdo pervert. The more they laugh about it, the more the suspicion is diffused. Even make the password something retarded.

Decoys are an underrated security tool because they're good against wrench attack too (better than multisig)

I hate 2fa. It does nothing to add security and makes it harder to log in. Just to protect your identity on a basket weaving forum?

@bulletbill22 using things like https://www.privacyguides.org/en/passwords/#best-case is more than enough to cut off the "hard way" dunno how people can live post covid era without 2fa. if ppl said "it does nothing to add security" then the argument was broken by itself

imagine your U-Pass leak. then ppl can just login with that, change password. change any other info. u done, locked outside. imagine u had 2FA like authenticator on other devices. if U-PASS leak. someone login, they need to input the 2fa key (which most of the time they didn't had). dunno which part said "nothing to add security" maybe u shall explain which part it doesn't add the security....

@UsualCat yeah it would be terrible. I'd have to make another free anonymois account, it'd take at least 30 seconds.

@bulletbill22 dunno how that mentality works. i rather not lose "ANY" of my account whether its worth or not. why i should make new one even if it's free if i can keep the old one....