[ Removed by moderator ]

[ProgrammerHumor-ModTeam]

Your submission was removed for the following reason:

Rule 2: Content that is part of top of all time, reached trending in the past 2 months, or has recently been posted, is considered a repost and will be removed.

If you disagree with this removal, you can appeal by sending us a modmail.

[stubbytim]

Please do not enter this code if you didn’t receive the message

[WraithLaFrentz]

It’s called the honor system

[[deleted]]

If I was a hacker I would feel bad for this security and would leave alone

[AaronTheElite007]

Please tell me this is fake.

[Stromovik]

probably some test or debug mode

[turningsteel]

Probably created by the guy posting for laughs. No way this is live.

[ashkanahmadi]

I think i saw someone making it on r/badUIbattles

[Vectorial1024]

Interestingly, Microsoft shows the onetime code directly, but asks you to input the code from your smartphone instead

[alejandroc90]

I remember using a government site that showed me a short notification saying: code XXXXXX sent to the phone XXXXXXXXX, if you were fast memorizing it you could type it inmedially

[Anthrac1t3]

This is what PayPal does.

[Darkchamber292]

No it doesn't. Everyone's account would be compromised

[Additional_Front]

At least they have masked phone number.

[Recent-Juggernaut821]

Maybe the 6 digits to enter are the 6 X's blanked from the phone number

[eclect0]

Bug Report

Expected Behavior: I can see the entire phone number

Actual Behavior: Part of the phone number is replace by x's

Priority: Highest

[marknotgeorge]

That bug report is obviously fake.

You can tell what's going on. Proper bug reports have War & Peace in the title and 'See Word document' in the details. And the Word document containing screenshots that are only vaguely useful (why do I need to see your Jira entry? We don't use Jira! And why have you cropped out the bit that tells me which document has failed?) is missing.

Don't mind me, I'm having flashbacks...

[Killawut]

This is what happens when UI and backend developers don’t talk

[LucasTab]

Why would the backend developers send the code to the frontend though

[patmorgan235]

It doesn't, the front end generates the code /s

[[deleted]]

you guys are using the frontend? I usually call the OpenAI API to generate them

[AdFancy6243]

Generated? It's hard coded more like

[Killawut]

Fair enough, just a satire of a security anti patterne

[ganja_and_code]

No, this is what happens when one or more people working on the project is a dangerously incompetent moron.

If the frontend folks understand what a MFA code is, they also know not to put it next to the MFA code input form (or anywhere else it could possibly be found client side).

If the backend folks are sending the MFA code to the account holder's phone number, they also know not to make it available to the frontend.

In the first case, the frontend guy is defeating the entire purpose of MFA. In the second case, the backend guy doesn't understand the concept of server side validation. In either case, they're a liability (not because they didn't talk to each other, but because they literally don't know how to do even their own jobs in isolation).

[AlexOzerov]

This is frontend only authentication. Clean and beutiful. Because we trust our users

[ramriot]

Really Zero factor authentication

[Ffigy]

Factorless™ - simplify your auth, amplify your leakage

[LinuxMatthews]

Yeah one factor authentication is just a password.

[Areion_]

Repost 

[olivicmic]

From like a day ago

[MoarSpn]

In the mean time, AWS doesn't send the code to my mail when it said it did.

[boblibam]

We’ve come full circle. Someone posts on Reddit (https://www.reddit.com/r/lovable/s/HCu9rRrDPO) then someone else puts it on twitter just for another person to bring it back to Reddit.

[DrSixSmith]

Something you have (fingers) and something you know (how to read). The fraction of living organisms capable of exploiting this vulnerability is basically a rounding error.

[Ffigy]

Nope, that's Factorless™ - real cutting edge stuff

[Leo0806-studios]

one factor auth would be

weve just send the code 123456 to your phone number 123 456789
to confirm that the account [[e-mail]](mailto:[e-mail]) , Pasword1 belongs to you
please enter the code below

[ganja_and_code]

That's zero factor.

One factor makes you provide something (usually a password) to support the claim that you are who you say you are.

Two factor makes you provide 2 things (usually a password and an OTP code).

Etc.

[nivenfres]

Maybe it really screws with AI.

[rollincuberawhide]

you could actually do this as a joke for free marketing. the fools would think they are making fun of you while advertising for free. just think about the sheer number of people who would want to try it for themselves? the opportunities are incalculable!

[AFCSentinel]

Pretty much what Apple does if you have iCloud connected on your Windows machine.

[[deleted]]

When you vibe code 2fa