2-Step Verification Gotcha

Bambu Lab Software
1

For some reason that no-one will share with me, my Bambu account suddenly requires a 2-step verification. I can assure you that I didn’t turn that ON. Thing is Bambu is sending me a verification email that I cannot receive. [My hotmail account won’t receive ANYBODY’S verification emails & who knows how long I will wind up waiting for MS to fix that issue for me]. In order to turn OFF 2-step verification, you have to be logged onto your account. A real life Catch-22. And what is so frustrating is that I can log into my Bambu account via Bambu Studio, but not when it comes to forums, store, etc.

I had to create this new Bambu account using my gmail address in order to participate in the forums, use the store, etc.

Stepping up onto soapbox…

2-step verification is getting out of hand IMHO. For financial matters, OK, but to log into my Bambu account?

I have a 2-step verification process:

Step 1: Ask me for my password.
Step 2: I enter my password.

It is my responsibility to ensure that my password is secure; I don’t need 2-step verification to be another pimple on my butt. Seems you can’t pass wind without being required to do 2-step verification. Sheesh!

I realize that sites (some sites, by no means all sites) are offering 2-step verifications as a choice for those who can’t be responsible for ensuring their passwords are secure. But when a site forces you into a 2-step verification process without your express permission, its doing a disservice to us all.

Stepping down from the soapbox now…

Point is, if you’re going to offer 2-step verification you need to be flexible when it comes to users’ problems. For example, if a user has to change email addresses for whatever reason and gives up their registered email address, the site has to be able to accommodate them and make the system change for them. I asked Bambu to go into my account and turn OFF 2-step verification. They said they did, but the system still requires me to putz with 2-step verification. Think about how you will feel if suddenly the email address you registered with is no longer available to you. You can’t access your account to change your email. Or what if you have to change phone numbers & then realize that your old phone number is what you used to register with a site & now you can’t get their 2-step verification text. Maybe not a big deal for you at this site, but other sites may be more critical for you.

2-step verification is like communism - sounds good but in reality…

If you are someone who takes password security seriously and does everything you can to prevent password theft (for which there is no guarantee) then I highly recommend you NOT use 2-step verificaiton. Especially if you are using your phone number instead of an email to get that verification message as your phone is more prone to theft/loss than a password.

2

I feel your pain, brother. After 10 years providing cybersecurity solutions to TLAs, I might have some insight to share.

2FA, as it’s currently implemented, was never designed to protect frivolous data as you alluded to. Today, it has devolved into corporate virtue signaling and posturing with hollow claims like “Bambu takes your data seriously.” Really? Bambu has been rightly criticized for invasive privacy practices and collecting personal data without even bothering to protect it. Their response? They rushed to implement changes but completely ignored the real complaint. Instead, they piled on extra security layers that mainly block users from accessing their own data.

In the security world, there’s an old saying: locks only keep honest people honest. When a lock malfunctions often enough to deny regular users access, those users will find a way to permanently bypass it, making the lock utterly useless. A well-designed security system should seamlessly integrate with the access control process—security should be a natural by-product of entry and exit, not an annoying extra step. This approach encourages consistent use, unlike scenarios where frustrated users “tape the door latch” because the badge reader is unreliable, just to name one common example.

But I should add that so long as their are fanboys and sheeple, unwilling to challenge authority, we are sadly stuck with this pile of :poop: