...winston wrote:
>>Thanks for having tested this and clearly for having looked it up for us!
>
> You're welcome.
I love when people politely and purposefully helpfully _help_ each other!
> - took about 3 minutes to test on/off - not a big issue
Well, I will never (never never never!) use 2FA/2SV, so it would be a "big
issue" for me, just as it would for me to do anything I hate to do.
So I, for one, kindly thank you for testing given it's important that Google
not be like Apple in making a switch like that permanent (as in forever).
> I suspect many will go looking for Google's settings in a mail
> account's settings, instead of the account's higher level settings.
> Thus the reason to clarify where the feature is found.
This is also a kind hearted purposefully helpful PSA which is appreciated.
> 2FA works quite well for my Apple ID
I'm sure it works.
The point is that you can _never_ turn it off once you turn it on.
As the judge said, if you want to turn Apple 2FA off, don't complain to her
because you are the one who "installed the software" (her words, not mine).
For Apple when you accept 2FA, it's permanent.
For Google, it's not.
As an aside, why the iKook nospam insisted that it was is always beyond me
as I've never met people, in the flesh, so confident in being so wrong.
These strange iKooks are no different than the lemon-juice bank robber was.
(It's _why_ they're iKooks after all.)
> For Google, only a GMail email account at this end...and for the purpose and
> use of that email account 2FV on or off isn't a big difference.
> For Desktop, laptop and tablet once trusted and from a non-signed-in
> starting position it's the same sign-in(just username/pw) with 2FV on or
> off.
>
> An iPhone using the Outlook iOs app which meets the upcoming Google
> authorization is also a non issue.
>
> For those that need to wear a tin foil hat to compute or post in this group,
> best they enable 2FV/2FA, if not, just add more foil.
There seem to be only three options after May 30th, 2022:
1. 2FA/2SV
2. OAUth
3. App passwords (which requires at least once using 2FA/2SV)
For me, on Windows, that means Thunderbird (with OAUTH2).
For me, on Android, that means something other than K-9 Mail.
For me, on iOS, Apple already locked me out so 2 of my 3 iPads are dead.
> For all other persons, in the long run - 2FA/2FV could very well be the norm
> and expected access route in the future.
If there was a way to do 2FA/2SV without losing your privacy, I'd not be
against it, as I care more about my privacy than my security.
That makes sense if you look at what the _real_ threat is, and not what the
(rather clever) advertisers _want_ you to think the real threat is.
As a simple but obvious example, Apple has crappy security and crappy
privacy in the iPhone, but they went hog wild playing up their Face-ID
gimmick.
Why?
a. Because people are stupid. They believe in Marketing gimmicks.
b. Or... all people who own iPhones actually do live in the slums.
(Pick one.)
People believe that their face is so unique that it is perfect security.
Fine. But...
The real threat isn't someone grabbing your phone out of your hands.
Apple assumes everyone with an iPhone lives in the Harlem slums, or the
Oakland ghettos, or the Bronx Projects.
Sure, if you live in the projects, of course you would want to secure your
iPhone from someone sneaking up from behind and snatching it out of your
hands.
But I don't live in the slums.
I don't even lock my car or my home front door.
And my driveway gate is often left wide open.
Since I don't live in a ghetto, my threat isn't someone snatching my iPhone
out of my hands despite Apple being _desperate_ to convince me it is.
> Note: 2SV and 2FA are not the same
> More info can be found here. Once understood, it's a reasonable write-up
> <
https://rublon.com/blog/2fa-2sv-difference/>
Well, I read the discussion by a bunch of people where it's "practically"
the same but "slightly different" so I simply lumped both together since I'm
not using either one unless they put a gun to my head.
When/if 2SV/2FA is designed in the future to add privacy instead of just
security, then (and only then) will I bother to consider it.
Personally, I think the marketing people have everyone thinking the real
threat is that they live in the slums, which just isn't the case for me.