Event JSON
{
"id": "2078c536f1df8d7d8bbc6982316e48d786b818422cf50013ab432629ab83312d",
"pubkey": "d84b86258bf9a00a524202aa2e5a9cf63bfb078c4c830f30aeca555210377cb1",
"created_at": 1712743999,
"kind": 1,
"tags": [
[
"e",
"3162c57d161a1f2c3daa786863220f227b2bd32e5432f2e8f99fca75e7439b52",
"",
"root"
],
[
"e",
"f5d6d819217e55dcd0b6259c906a6c7ea0643df4c18144ab63a5f291a256521d",
"",
"reply"
],
[
"p",
"31cc78a689b792b2dc81d909a565ab0dbb06bf764c4ee74e99793281dafee819"
],
[
"proxy",
"https://mastodon.bentasker.co.uk/users/ben/statuses/112246390762562507",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.bentasker.co.uk/users/ben/statuses/112246390762562507",
"pink.momostr"
]
],
"content": "It's still 1 factor (rather than 0FA).\n\nIIRC, Microsoft started that ball rolling with their Passwordless login option (https://blogs.windows.com/windowsexperience/2021/09/15/microsoft-announces-passwordless-future-available-across-microsoft-edge-and-microsoft-365-apps/)\n\nBut, I agree, it's really dumb. \n\nI'm not a fan of SMS 2FA at all, but it at least requires you know secrets (my password) too rather than just needing to compromise one (central) component - it's hard not to view it as providers trying to outsource liability for compromise",
"sig": "fad9d605c084bd60b575d9155a0b27220ac6b57dcae74ab89161fabbd119757f50da8dfd649bc907e8b893617d63dab5fbeab673c42ebe12538e15281670633b"
}