Hacker News Reader

Comment by crazygringo | Hacker News Reader

Sorry but you've made that up. That's not a thing.

I saw your other comment, and that was your fault for not having access to your own e-mail account. Asking you to sign in with a verification code isn't blocking your ticket with "no recourse".

Not to mention, you can usually just go to the ticket office and they can look up your ticket if your app isn't working. Obviously they don't advertise this because they don't have enough people to handle if everybody did that. But they're not trying to lock you out from your own ticket.

View on HN

And as I have just explained in that other comment, they did not ask for a verification code when I bought the ticket. They also did not ask for one when I tested that I could pull up the ticket after I installed their app. They only did so shortly before the show.

Perhaps somewhere deep in the terms of service that approximately zero customers have ever read, it says "Use of this ticket is contingent upon having immediate access to the email address associated with your account." Regardless, it seems unreasonable for them to expect that every user will have connectivity. If that is a requirement, they should state it more clearly.

What does it matter that they didn't ask for a verification code when you bought the ticket? They do that when something looks different, like you're using a new browser or you're in a new location.

Websites and apps commonly require you to log in again when you haven't used them for some time period anyways.

These days, yes, having connectivity and being able to verify a code is just standard practice. It's just security.

>I saw your other comment, and that was your fault for not having access to your own e-mail account.

That's the point, though - we shouldn't need always-on, 24/7-access to email for everything always and forever. You're just victim-blaming at this point.

>Sorry but you've made that up. That's not a thing.

I have a very fun and exciting story about being locked out of my Google Wallet account for that very thing while on vacation. My primary Google account is still banned from performing any monetary transactions as a result, 10+ years later.

If you need to log in to something, yes you need always-on, 24-7 access to email or to SMS depending on how the service/account is configured. That's a very common form of 2FA. I'm not victim-blaming, this is just bog-standard security.

And what I said is "not a thing" is TicketMaster preventing you from entering an event because you've changed location and that you "have no recourse". You definitely have recourse, there are a number of ways, just like it seems like that person did.

Again, the point is that that shouldn't need to be how things function. That you ignore that point of my comment and continue to blame the person for not adhering to how things are misses the point and just continues this circular conversation. Enjoy your day.

Companies don't implement security measures for the fun of it. They do it to prevent hacking, theft, and fraud.

So funny, HN is usually pro-security and pro-2FA.

This conversation isn't circular, you're the one who seems to be missing that this is just standard practice, and for good reason. People try to pull all kinds of scams with tickets. Requiring you merely to log in with 2FA is not problematic.

Reply on news.ycombinator.com