I'm so fucking sick of Google and other sites ratcheting up ""security"" and bullshit steps to """"""""""protect"""""""" me when they don't give half a rat's ass about any individual welfare or security. like they literally don't give a shit about any of us but this stupid fucking forced 2FA crap and mobile-tied-to-all-account-actions-on-desktop Google got aggressive on is pissing me off beyond anything else. this shit is forced on us only to remove themselves from any claims of liability.
I use a password manager for years (keepassdx & keepassxc) to generate absurdly long random passwords and change them at least yearly. no shady downloads on my PC, no pirated stuffs of any kind, I'm computer savvy in general and run a tight ship. recently trying to clean up (log out) some old mobile sessions on my Google account, and change my main account password, things I've done quickly and without hassle in the past. suddenly being asked for password AND forced to tap the stupid fucking number sent to my Android phone, which of course I don't receive because it's sending to some stagnant Android session that was overwritten by my various Android and GrapheneOS installs (tinkerer).
completely stonewalled on my own account now. can't change password any more because the shitty little kindergarten secret passcode doesn't send to my current accessible Android install, can't log out old devices to keep it from being sent to those. tangential note, last year the rent payment portal for my shithole apartment added forced 2FA to all accounts too, never had it before and shit was just fine, but now an extra step and waste of my fucking time just to pay the do-nothing landleech who lives in a different fucking state.
so fucking pissed I could break someone's face rn. fuck everything. fuck capitalist-infected software. fuck techbros. fuck Google. fuck AI. fuck Flock. so tired of this endless fucking bullshit that keeps getting worse. thanks for hearing my TED talk.
Some systems force you to use push notifications. But for most things, if you're on Linux (maybe there's a Windows equivalent) you can actually use the
oauthtoolcommand to (half-)pretend you're doing MFA.You usually have to say "give me a code for my authenticator app", then run
oauthtool --totp <code>and get the code that way. Still a pain but the joy is that you don't need any second device included at all.I'm suddenly not certain - possibly you can just keep that code like a second password and run oauthtool on any device to get a valid code? I'm not sure but huge if true.