And that's when you find out the app considers this usage pattern as a signal of fraud, so then you can't get into the event and have no recourse. Their app, their rules, your loss.
I saw your other comment, and that was your fault for not having access to your own e-mail account. Asking you to sign in with a verification code isn't blocking your ticket with "no recourse".
Not to mention, you can usually just go to the ticket office and they can look up your ticket if your app isn't working. Obviously they don't advertise this because they don't have enough people to handle if everybody did that. But they're not trying to lock you out from your own ticket.
That's the point, though - we shouldn't need always-on, 24/7-access to email for everything always and forever. You're just victim-blaming at this point.
>Sorry but you've made that up. That's not a thing.
I have a very fun and exciting story about being locked out of my Google Wallet account for that very thing while on vacation. My primary Google account is still banned from performing any monetary transactions as a result, 10+ years later.
And what I said is "not a thing" is TicketMaster preventing you from entering an event because you've changed location and that you "have no recourse". You definitely have recourse, there are a number of ways, just like it seems like that person did.
So funny, HN is usually pro-security and pro-2FA.
This conversation isn't circular, you're the one who seems to be missing that this is just standard practice, and for good reason. People try to pull all kinds of scams with tickets. Requiring you merely to log in with 2FA is not problematic.
Perhaps somewhere deep in the terms of service that approximately zero customers have ever read, it says "Use of this ticket is contingent upon having immediate access to the email address associated with your account." Regardless, it seems unreasonable for them to expect that every user will have connectivity. If that is a requirement, they should state it more clearly.
Websites and apps commonly require you to log in again when you haven't used them for some time period anyways.
These days, yes, having connectivity and being able to verify a code is just standard practice. It's just security.