Hacker News Reader

Comment by esotericn | Hacker News Reader

It's frustrating to be a power user in general with these sort of 'automated lockout detection' mechanisms.

I've lost count of the number of times I've tried to log in to, I dunno, eBay or whatever, and computer says no, and I have to call some bloody line and speak to someone who hates their job and doesn't understand what I mean when I talk about IP addresses.

I wish that these services had a way to check some box and say "look, I really know what I'm doing, let anyone with the correct password/SSH key/whatever in".

If it gets hacked, _then_ I can go through all of that shit. In this case we're talking about a bloody chat server for christ's sake.

View on HN

Yeah, you wish for too much. I remember losing MAL account (yeah, don't judge me) which I had for like 10 years (probably longer, really), not because I didn't have the correct password — I did, but because they fucked up with security not long before that and I suddenly needed to verify it was me via some email account I didn't use for the same 10 years. I mean, really, somebody stealing my MAL account? Why anybody would need that, even I don't need that, it was just silly losing my account I had for so long, because they care so much about me not losing my stupid account. So, fuck MAL. And fuck twice any service, that needs to verify my email/phone/passport name more, than it needs my money I am ready to pay for pizza delivery or whatever.

You think the right set of people will check that box? And that if they do get hacked they won't cost the company a ton of resources in support/lawsuits/etc?

I mean, in practice, the 'right set of people' just don't use the service, so you're probably right.

I've probably made about ten discord accounts with random names to join some one off server, then gone back to IRC, because it just works.

I think the "check box" in this case should be the act of opting into 2FA. I've expressed this to Discord before when asking why they require reCAPTCHA upon login, even for an 2FA-enabled account like mine.

You have to remember that even if you don't care about your account getting hacked, hacked accounts are a nuisance for other users of the platform as well.

Reply on news.ycombinator.com