WorseDoughnut 🍩

100% Certified Good Boy

Used to mod Smash Bros Brawl on the Wii (Smash Bros Legacy TE Co-Lead & Stage 3D Modeling)

Now I’m a NYC-based Penetration Tester

Original Account: @WorseDoughnut@kbin.social

  • 0 Posts
  • 104 Comments
Joined 1 year ago
cake
Cake day: July 28th, 2023

help-circle


















  • I made a concerted effort one evening to go into my downloads folder on my PC, rename all the nameless garbage filenames, and then actually move and sort them into my pictures/documents/etc folders.

    Was a huge pain in the ass, but it saved me so much effort looking for stuff later on down the line. Also, changing Firefox’s default download setting to prompt me for a name and location every time certainly helped.


  • And yet all websites seem to still exist using only email verification.

    Yes, and unless you haven’t noticed spam comments and fake account are rampant across most popular online services.

    that a server admin and a company shouldn’t be asking for excessive security for recreational uses.

    And yet most people don’t care, and just add their phone number to their Discord account without a second thought; because it’s not excessive, it’s the norm. You can’t even make an account on Instagram without providing your phone number, and in some cases and selfie while holding up a security code on a piece of paper to verify you are human. I’m not saying this slow creep into collecting user date should just be hand-waived away by virtue of it’s widespread adoption, but the matter of fact is that if it was really viewed as such an egregious breach of privacy by the average person, then it wouldn’t have survived since no one would be using the affected services.

    they need to look into other methods of securing their servers

    You seem to be willfully ignoring the fact that phone number verification is the answer to this question. Real people tend to have one phone number, fake phone numbers are easy to create but cost money, emails do not cost money.

    Do you really not see the intrinsic benefit of requiring a phone number as the strictest form of online security for a tragically spam-laden service like Discord?