HackerNews中文版

好的，我在 Gmail 上有一个工作帐户。之前有过被 Gmail 锁定的经历（无休止地循环出现“您输入的密码正确，但我们无法确定是您本人，请稍后重试”），所以我通过 Google Authenticator 创建了 2FA，并设置了备用代码，以为这样就能安全地避免他们要求我在另一台设备上登录或输入短信验证码（我没有随身携带那部手机）。有一天，阳光明媚，我决定将标准的 iOS 邮件应用添加到这个帐户中，结果，连接后一小时，我就收到一条消息，说由于我的帐户有异常活动，需要我输入通过短信发送的验证码。好吧，我没有带那部手机，所以我尝试使用 Authenticator 登录，但没用：“我们无法确定是您本人，请输入发送到短信的验证码”。好吧，我翻出备用代码，输入它们，仍然收到“我们无法确定是您本人”的消息。如果 Authenticator 或备用代码毫无用处，那么设置它们有什么意义呢？如果 Google 有人看到这篇文章，请不要联系我提供帮助。直接改掉这个愚蠢的系统吧。

查看原文

Ok, I have a work account on Gmail. Having the experience of being locked out of Gmail previously (endless loop of "You are entering the correct password but we're not sure that it is you, try again later"), I created a 2fa via Google Authenticator and set up Backup Codes and thought I'm safe from them asking me to sign in on another device or enter sms code (I don't carry that phone with me).<p>So, one sunny day I decided to add standard iOS mail app to this account, and lo, an hour after connection I get a message, that due to strange activity on my account, I need to enter code sent via sms.<p>Ok, I don't have that phone with me, so I try to log in with Authenticator, and no, no good: 'we are not sure that it is you, enter code sent to sms'. Ok, I dig backup codes, enter them, and still get 'we are not sure what it is you' message.<p>What's even the point of allowing to set up Authenticator or Backup Codes if they don't do anything?<p>If there are some people from Google reading this, please, don't reach out to me offering to help. Just change this dumb system.

Gmail 的备用代码无法用于访问账号。