nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqv5atqz9k9c54q8c28kra6sfata0wk7w7x5gkrnde8vmxe5gt00q8mmv7s (nprofile…mv7s) if it can be credential stuffed, it will be credential stuffed.
from personal experience i’m quite sure that there was a security person saying ‘let customers use an authenticator app if they want to please’ but management got scared that that would be too much ‘friction’ for customers in the login pathway and that gets one to email 2fa.
bakachu
npub1xt…50cgk
2026-03-08 17:18:39 UTC
in reply to nevent1q…8537
Author Public Key
npub1xt0fgxa9qvknysekdj8ws9yvgg5um67hmdr0mpwngmm2qkf4g26sy50cgkSeen on
wss://relay.ditto.pubPublished at
2026-03-08 17:18:39 UTCEvent JSON
{
"id": "309d58415d08ac6bdb8c4e7ae959aeed59b85b5b719e1c71a015f961130d5acf",
"pubkey": "32de941ba5032d3243366c8ee8148c4229cdebd7db46fd85d346f6a0593542b5",
"created_at": 1772990319,
"kind": 1,
"tags": [
[
"p",
"0329d58045b1714a80f851ec3eea09eafaf75bcef1a88b0e6dc9d9b366885bde",
"wss://relay.ditto.pub"
],
[
"p",
"c35a8fae05a838b863707803bb1fdfcfcbb39adcf01ee1a9fc52ef44998ce4c0",
"wss://relay.ditto.pub"
],
[
"e",
"4fca681ed293962f7be8e923a760b273166905b4ff2895236b4d47baf56d1750",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://infosec.exchange/users/bakachu/statuses/116194693597682024",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqqv5atqz9k9c54q8c28kra6sfata0wk7w7x5gkrnde8vmxe5gt00q8mmv7s if it can be credential stuffed, it will be credential stuffed. \n\nfrom personal experience i’m quite sure that there was a security person saying ‘let customers use an authenticator app if they want to please’ but management got scared that that would be too much ‘friction’ for customers in the login pathway and that gets one to email 2fa.",
"sig": "5baf33d0d3d7aea18447409f5057ad74181f6356d038ebdd7b91bf7fbf8b59dbe8f9787ae265a7bd53275dd5d23e3733edbec868b9b471c7e8cecf2fd67cc3b4"
}