Supposedly, if you click on the 2FA link on a mobile, it will launch your 2FA app to capture the info. But if that doesn’t happen, you can right click on the button, and copy the secret to create a record in your 2FA app manually. The app has to support SHA-256, so I think pretty much Authy, Microsoft Authenticator, Google authenticator, etc. are out. Supporting apps include 2FAS and Aegis.

If this can’t be done, you should click Remove 2FA and save. Otherwise, you might loose your account. On some instances and on Firefox, you may want to do this with all the extensions disabled. Some extension seems to somehow get you logged out clicking refresh.

There are some apps (like video player) that if you open it, the screen won’t lock. Because it’s hard to figure out which screen wouldn’t lock, I enable the Accessibility feature which has a lock button in it. I also put in a “Lock” button in the same location on all my home screens. I lock the phone manually except on the screen I know for sure the phone will lock automatically.

XSS vulnerbility hack. From a mod:

https://lemmy.blahaj.zone/post/766402

Topped with lots of cream?

Thank you. That’s a very nice summary.

When it’s auctioned, it would become the most valuable small pile of s… in the world.

Thx for replying. Would you expand on the idea why VPN wouldn’t help with increasing the person’s privacy?

BTW, I have tried logging in using Tor. It pretty much works normally but slightly more slowly. Of course, Tor throws more fits depending on how the connection is created, so you are right, I personally would hate having to use it regularly.

Thx for the reply. For the sake of discussions here, if someone think they can increase the privacy by always using Tor to access all the fediverse accounts, and let’s just assume they don’t ever miss (for me, this probably is unlikely). How do you think this increases linkability to their … ?

Thanks for the reply. Yeah, I think this makes sense when you trust your VPN provider more than your ISP/government.

Thx for the reply. I probably wouldn’t want discuss anything indicating illegal activities or political activism on the Fediverse. I think Reddit was just demanded to turn over some (subset?) of discussions about copyright piracy. They might get away without the subpoena altogether on the fediverse arguing the data is already public.

Also, isn’t onion service pretty much used to hide the server’s IP, but doesn’t do much about hiding anything for the end users?

Damn it, I thought it was a real story ending suspiciously. The community name is definitely not the first thing you see here. Thanks, dad.

I looked. I’d guess the ones with 0 votes are posts done by bots, possibly powered by AI. The one I looked closely posted and commented to get karma points to get past the filters to post promotions/scams in other subs. The mods, including spez himself, are not doing any filtering. I am not sure if any is done for protest, but I only looked closely at one.

edited: grammar

One upvote means at least one person appreciates you. More than that, there are no karmas or anything. You can use the votes to see the most appreciated comments, though.

I believe this is how Microsoft implements verification so that users do not have to remember their passwords. You can probably disable it in Security > Advanced security options > Send sign-in notifications.

Personally, I find this very convenient, especially when logging into a new device/app/service for the first time. However, I imagine that if someone else is trying to get into my account online, it would be the first thing I disable, switching back to entering my password by default.