I personally am fine with this.

  • @ReversalHatchery@beehaw.org
    link
    fedilink
    3011 months ago

    And not the twitch way, where you have to have in an identifier, your phone number, but using proper, standards ways for it, like TOTP and such

        • moosetwin
          link
          fedilink
          English
          311 months ago

          Before I deleted my accounts there, I remember twitter and facebook deactivated your account for “suspicious activity” if you did not provide a phone number when making it, and the only way to reactivate it was to give them your phone number.

        • SkaveRat
          link
          fedilink
          011 months ago

          true. But I think that’s mostly to make bots harder to create. Not as easy to get a phone number than an email address

      • @ReversalHatchery@beehaw.org
        link
        fedilink
        5
        edit-2
        11 months ago

        As the other commenter said, only if you give them your phone number, and only through that garbage authy that does not use standard TOTP, but some proprietary crap, specifically made for twitch.

        And if you give them a phone number, which another user will also try to use in the future, then the secret used for TOTP can change in any moment, which means if you exported the secret to e.g. Aegis and deleted that tracking filled garbage that is named authy, at one point the codes just won’t work anymore, and you’re practically locked out. Apparently support should be able to help, but they don’t give a single fuck.

        • SkaveRat
          link
          fedilink
          411 months ago

          and only through that garbage authy

          you can use any TOTP app. I use bitwarden

          • @ReversalHatchery@beehaw.org
            link
            fedilink
            211 months ago

            How? How do you import the secret key to it? Are they finally showing a proper QR code when setting it up?

            My account is still locked to authy, and the support pages I have read are written as if it would still work through authy for everyone.

            • SkaveRat
              link
              fedilink
              211 months ago

              Are they finally showing a proper QR code when setting it up?

              At least that was the case for me. I removed 2FA to make the authy key invalid and activated it again. and they do the normal TOTP setup stuff during setup

              • @ReversalHatchery@beehaw.org
                link
                fedilink
                111 months ago

                That sounds good. I still have a working login somehow, but unfortunately I can’t disable authy, because they want a code to do that, and they won’t accept those that I have, even though it was working when I have set it up.

                • SkaveRat
                  link
                  fedilink
                  111 months ago

                  do you have the backup codes somewhere? Could help

                  • @ReversalHatchery@beehaw.org
                    link
                    fedilink
                    111 months ago

                    I don’t. Not sure whether they even provided those when I have set it up, maybe they thought that since it’s stored online you can’t just lose it, but I really don’t remember whether there was any I could have saved. It way years ago.

                  • @ReversalHatchery@beehaw.org
                    link
                    fedilink
                    111 months ago

                    Also, thinking about it, the prompt does not give an option to use a recovery code, but only to try with the phone number (which is dead by now), or contact support.

          • @ReversalHatchery@beehaw.org
            link
            fedilink
            411 months ago

            First of all, that they are totally unnecessary for twitch to be able to provide 2fa authentication.

            Other than that, their app has tracker components, all secret keys are stored in the cloud, who knows whether that’s encrypted, but on your phone’s storage surely not, if yours is rooted you can just view it in a file manager and copy it to a normal code generator app.
            Generally they support standard TOTP code generation, but for twitch they are using some weird shit that generates 8 long numbers (instead of the standard 6), of which the middle 2 is the same so they drop one of them, and then also codes expire in third the time as it is normally.