1. Mult Factor Authorization systems will be the death of me yet! Words do not express hos much I despise having to use such systems, or the contempt I have for people who ASSUME that because I have 1 or more computers that I must ALSO have 1 or more cellular telelphones, and that same device is capable of receiving random textural information. I haven't owned a cell phone since Verizen depracated my new Samsung PDA that ran Windows CE that cost $800. It was a gift from someone who passed away several years ago.
2. MFA using an email address is a joke. For one thing, it requires the email receiving point-device to be online and connected in order to work. It doesn't help when it isn't even in the same city sometimes. Then there are the problems with email providers not wanting to honor your email access if they see you have changed location, so again you don't have access to the MFA code.
3. if the email is accessed from the SAME computer being used to log-in to the site sending the MFA, then the safety is defeated anyway as the system, if compromised, is already compromised.
4. The sign-up for using this board to merely comment on the blog-entry requires too much informationm, and way too much is in the TOS one has to "agree to". Just becuase I clicked that I agree to it doesn't mean I agree to it. It just means I clicked on it so I can comment.