“Technologists have historically failed to evaluate the effectiveness of authentication requirements against all reasonable attacks, to disclose the shortcomings of these requirements, and to account for and acknowledge their negative impact on users.” Excellent article about #2FA but the lessons about #cybersecurity are more general.
▻https://medium.com/@stuartschechter/before-you-turn-on-two-factor-authentication-27148cc5b9a1