-18

In my personal opinion, 2-factor authentication is an important feature that Stack Exchange sites should have yet they lack it.

I was contemplating writing a post of some importance but I'm being held back by the fact that 1-factor authentication isn't very secure.

Is this feature going to be implemented anytime soon?

24
  • 9
    "I was contemplating writing a post of some importance but I'm being held back by the fact that 1-factor authentication isn't very secure." I'm confused as to why the lack of 2FA would stop you; all content here is public so as soon as you've submitted the post anyone can view and edit it.
    – Thom A
    Mar 15 at 17:10
  • 21
    What does 2FA have to do with making an "important" post? No posts on Stack Overflow are more important than others, so I'm trying to understand why you can't make the post you want to due to a lack of 2FA. Why is the lack of 2FA "holding you back" from making an "important" post?
    – Thom A
    Mar 15 at 17:12
  • 3
    A "hacker" could just create a new account and deface your post, so I don't see the problem still on why the lack of 2FA is stopping you make an "important" post. Why is it so important?
    – Thom A
    Mar 15 at 17:18
  • 12
    What would hackers do with your important post? Delete it - it can be undeleted. Edit it - it can be reverted. Also, how often really do hackers steal SO accounts to do whatever the nefarious deed you think they do with posts?
    – VLAZ
    Mar 15 at 17:19
  • 3
    A hacker couldn't really get away with doing a lot of damage, really...since everything has an audit trail, the best that they could do is inconvenience a Stack Overflow developer for a day while they clean up the mess. Then you (the owner of the account) would still bear the brunt of the suspension for keeping "correct horse battery staple" as your password.
    – Makoto
    Mar 15 at 17:20
  • 3
    @Larnu heck, you don't even need an account to edit posts. Anonymous users can also make suggested edits.
    – VLAZ
    Mar 15 at 17:20
  • 4
    @VLAZ exactly, which makes me even more confused as to what the op is concerned about.
    – Thom A
    Mar 15 at 17:22
  • 9
    Maybe because you seem to be really concerned about something but are only giving rather... strange justifications for being concerned about it? I don't really see a problem for requesting stack add a 2fa option, but not because I'm concerned someone will... do something... with an important post i'm considering posting... given anything someone with access to your account can do to that post anyone else in the community can do as well.
    – Kevin B
    Mar 15 at 19:04
  • 3
    Well @OP, you have 4k-Rep, you should know a bit how the Site works, your "post of some importance" sounds like an April Fools joke..., or a prank...
    – chivracq
    Mar 15 at 19:11
  • 1
    Related: meta.stackexchange.com/q/318807/332043
    – Zoe is on strike Mod
    Mar 15 at 20:03
  • 1
    There are plenty of duplicates. Here is one from 2020. A list. Mar 15 at 20:31
  • 1
    "I was contemplating writing a post of some importance but I'm being held back by the fact that 1-factor authentication isn't very secure." - It's currently implanted. My account is linked to my Google Account, which is secured with 2FA, thus my Stack Exchange community accounts are secured with 2FA. Mar 15 at 20:53
  • 5
    What precisely is your threat model here? Mar 15 at 22:41
  • 2
    @KarlKnechtel i didn't give it a lot of thought but 2FA gives additional security
    – machine_1
    Mar 15 at 23:01
  • 2
    No one is disputing that 2FA is a good thing, @zcoop98 .what many of are disputing is that a lack of 2FA isn't a reason for a post that is "important" to not be posted; "important" posts don't exist and posts are susceptible to damage by other users, not just the OP's. That the OP's account does or doesn't have 2FA doesn't protect it from a malicious edit, from another user (who may or may not have had their credentials compromised).
    – Thom A
    Mar 16 at 17:59

1 Answer 1

10

Depends on how you authenticate to Stack Overflow, honestly. Most people use either Google, Facebook or GitHub authentication, and all three of those platforms support 2FA. Stack Overflow's doesn't, sure, but I don't see that as a major...issue. If using a Stack Overflow account doesn't meet your security requirements, you have three different options to choose from there, and again - they all offer 2FA.

Most people tend to use OAuth with their favorite service of choice and let that handle the 2FA. It's a bit of a pain to deal with about twenty different sites' 2FA codes all at once, y'know.

5
  • 8
    "Most people use either Google, Facebook or GitHub authentication" => Source...? Stats...?
    – chivracq
    Mar 15 at 18:45
  • 1
    I'd be much happier if we just got rid of all malicious people, and good-intentioned people who regardless perform malicious acts, and the need for authentication at the same time. It would be a paradise for the 2-3 people left. Mar 15 at 21:25
  • 2
    @user4581301 ietf.org/rfc/rfc3514.txt problem solved.
    – starball
    Mar 15 at 23:46
  • Seems like it would be pretty boring for those 2-3 people left, @user4581301. And, thus, I doubt even they would last long. Mar 16 at 5:04
  • 1

Not the answer you're looking for? Browse other questions tagged .