Today I learned that Wikipedia doesn't provide users with 2 factor authentication by default - you have to ask and specifically and be approved for the privilege 👀
Conversation
Replying to
That's extremely interesting and even more so when one considers the recent Quora security breach that affected over 100 million users. Security should never be an afterthought.
1
In my experience, limited 2FA implementation is usually bottlenecked by user support — "do we have the manpower to help users who lose their 2FA device?" Most platforms don't want to have to tell users "ay tough luck"
1
1
2
That's a good point. I know from a business perspective when I worked for a large non-profit that dealt with government data that we had issues after implementation of 2FA. The technical hurdles were minor compared to the amount of user support we needed to provide.
Yeah, security is often a bother to customers. That incentive is a weird one for companies to deal with.
2