logoalt Hacker News

tokyobreakfastyesterday at 9:39 PM3 repliesview on HN

> Dude, it's 2025.

Actually, it's 2026 and has been for six weeks.

> A few years ago, I accidentally left my phone at home when I went to work, and when I arrived I found that because I no longer had my 2FA device, I couldn't do any work until I went home again and picked it up.

Sounds like a personal problem. There are many other 2FA authenticators available. Yubikey, TOTP tokens, smart cards, etc. Using a smartphone (which can lose power at any time) for critical authentication was a silly idea to begin with. I would refuse anything work-related on my personal phone.


Replies

ben_wyesterday at 9:54 PM

> Actually, it's 2026 and has been for six weeks.

D'oh. But fair.

> There are many other 2FA authenticators available.

Specified by job, so no choice in this matter.

> I would refuse anything work-related on my personal phone.

Quite reasonable as a general rule, though my then-employer only required the 2FA app and nothing else, and in this case it would've just meant "get an additional phone".

sensanatyyesterday at 11:38 PM

We were literally not given the choice in the matter, in the case of $JOB. Plenty of people complained about having to use their phones to access the buildings, but that was the policy.

I suspect the next thing you're going to say is along the lines of "then just switch jobs", though.

show 1 reply
theshacklefordyesterday at 11:13 PM

> I would refuse anything work-related on my personal phone.

What a wonderful privileged position you hold. If only everyone could afford to tell their employer to pound sand in the same heroic manner you have undertaken.

So brave.

show 1 reply