Apple is being sued because 2FA "takes too long"

[DrMacintosh]

A user is suing Apple, claiming that Apple's 2 Factor Authentication system takes too long and is disruptive to users. The plaintiff also claims that Apple's 2 Factor authentication system is abusive because you cannot switch back to a less secure sign in method for 14 days after enabling 2FA on an iCloud account. 

Quote

The suit, filed by Jay Brodsky in California alleges that Apple doesn't get user consent to enable two-factor authentication. Furthermore, once enabled, two-factor authentication "imposes an extraneous logging in procedure that requires a user to both remember password; and have access to a trusted device or trusted phone number" when a device is enabled.

So yes, Jay here is upset that the default option for setting up sign in options for iOS and Mac devices is to use 2FA. Further Jay is upset that it takes so long to verify who he is. 

Quote

Filing paperwork associated with the suit also alleges that harm is being done, and potential class members "have been and continue to suffer harm" including economic losses, based on a waste of personal time for an extended login process that has become a multiple-step process.

Yes, harm is being done by ensuring that your account is secure that that people cannot hack your iCloud account and gain access to information that could literally ruin your business or your life. I'm sorry that the ~8 seconds it takes to log in with 2FA prevents that. Perhaps if Apple were not to enable 2FA by default, this guy would be ok with his account being easily hackable? (of course not, he would probably sue!)

 

You just can't please people. This is a perfect example of someone just looking to make a quick buck at the expense of a business. Its low, its slimy, and anyone who does it defiantly has 0 class. 

 

The plaintiff is also exaggerating reality (and possibly straight up lying), calming that logging in with 2FA enabled takes up to 5min, when in reality it takes about 5 seconds. 

Quote

First, Plaintiff has to enter his selected password on the device he is interested in logging in. Second, Plaintiff has to enter password on another trusted device to login. Third, optionally, Plaintiff has to select a Trust or Don't Trust pop-up message response. Fourth, Plaintiff then has to wait to receive a six-digit verification code on that second device that is sent by an Apple Server on the internet. Finally, Plaintiff has to input the received six-digit verification code on the first device he is trying to log into. Each login process takes an additional estimated 2-5 or more minutes with 2FA."

In reality, after a user has trusted devices enabled on their account, when they attempt to log into a service that uses their Apple ID, their Trusted devices are immediately pinged to allow the log in, and the after the log in is approved the user must enter a 6 digit pin displayed on a trusted device into the device they are trying to log into. The log in is complete once the servers verify the pin matches. This process takes approximately 8 seconds. 

 

Here is the case behind his money grab:

Quote

The suit is demanding injunctive relief, fines and penalties assessed on Apple in accordance with the Computer Fraud and Abuse Act, and is seeking "all funds, revenues, and benefits" that Apple has "unjustly received" from the action, but what precisely that entails isn't listed in the filing documents. The filer is also asserting that Apple is violating California's Invasion of Privacy act, but how that applies also isn't immediately clear.

Hopefully the case gets thrown out and this guy can go get a job. 

 

Source: https://appleinsider.com/articles/19/02/09/apple-being-sued-because-two-factor-authentication-on-an-iphone-or-mac-takes-too-much-time

[lewdicrous]

How entitled do you have to be to sue someone for such a mundane thing..

[Valentyn]

Oh jaysus......

[Ashley MLP Fangirl]

Apple 2FA is the fastest 2FA i have ever experienced. what is this guy talking about?

[sazrocks]

Pretty much every aspect of Apple's auth system is the fastest in its category... What is this guy on about?

[Valentyn]

Just now, firelighter487 said:

Apple 2FA is the fastest 2FA i have ever experienced. what is this guy talking about?

Make him use Epic's account 2FA with the email verification code. They have forums of people waiting days or more to get the code

[Dogeystyle]

Can we be sure this Jay dude is not using an Iphone 4?

[Xatris]

Truly amazing 

[Fasauceome]

Yes, people have been known to sue for frivolous reasons, but i will actually have to reserve judgement, and here's why:

 

Remember that woman who sued McDonald's for hot coffee? Yes everyone remembers her as a hack who tried to get some free cash for something mundane.

Only here's the problem. After her coffee spill, she suffered 3rd degree burns and actually went into a coma for a few days. She won the lawsuit and got something like 5 million dollars from McDonald's, but they're done so much to make the case look ridiculous to protect their public image.

 

@DrMacintosh nothing against your reporting but I'm not sure these details are to be trusted quite so soon, there may be more to come to light.

[XR6]

3 minutes ago, fasauceome said:

Remember that woman who sued McDonald's for hot coffee? Yes everyone remembers her as a hack who tried to get some free cash for something mundane.

Only here's the problem. After her coffee spill, she suffered 3rd degree burns and actually went into a coma for a few days. She won the lawsuit and got something like 5 million dollars from McDonald's, but they're done so much to make the case look ridiculous to protect their public image.

Yeah, but she sustained injuries and went into a coma. As far as I can tell, this guy hasn't. 

I really don't think anyone is being harmed by the fact that '2FA takes too long'.

IMO this whole case is just a cash cow. Nothing more, nothing less.

 

Quote

nothing against your reporting but I'm not sure these details are to be trusted quite so soon, there may be more to come to light.

I agree. There may be more information that has been missed out. If there's information missed out, who's to say the information they gave you is correct?

[Valentyn]

LOL! The lawyers are also clueless! Directly from their legal claim documents!

Neither of these are 2FA code requests.. one is when connecting to iTunes the first time for syncing, the other is asking for the Passcode, for an iOS update...

 

Neither of these require an addition device, or a 2FA prompt where they need to click allow, and get a 6 digit code to enter.

 

https://www.scribd.com/document/399265266/Brodsky-versus-Apple-alleging-that-two-factor-authentication-is-abusive-to-users#fullscreen&from_embed

 

 

[DrMacintosh]

2 minutes ago, fasauceome said:

but I'm not sure these details are to be trusted quite so soon, there may be more to come to light.

Possible but highly unlikely. This guy is more than likely a fraud. 

[Fasauceome]

1 minute ago, 1kv said:

Yeah, but she sustained injuries and went into a coma. As far as I can tell, this guy hasn't. 

I really don't think anyone is being harmed by the fact that '2FA takes too long'.

IMO this whole case is just a cash cow. Nothing more, nothing less.

 

Like I said, maybe something did happen to this guy. I don't know much about the publication Apple Insider, but if they're biased in favor of apple, there's a chance they left out key details. 

 

On the face of it, yeah this looks like a garbage case I've got no sympathy for the guy if it is.

[JoostinOnline]

These are the kinds of people who click 50 times on something because it's taking too long the first time.

[DrMacintosh]

Just now, fasauceome said:

Like I said, maybe something did happen to this guy.

Well you can’t sue on behalf of others unless it’s a class action. 

 

1 minute ago, fasauceome said:

I don't know much about the publication Apple Insider, but if they're biased in favor of apple, there's a chance they left out key details. 

Hey have no history of sugar coating news, especially lawsuits. 

[Origami Cactus]

That sound like grade a example of someone reading that apple is a billion dollar company now and then thinking : "Hmm, how can i get a slice of that money".

Seriously, there are too many of those fake lawsuits.

[Drak3]

BRB gonna sue Apple because my MBP doesn't ready my fingerprints after a 30 minute shower.

[ScratchCat]

16 minutes ago, Dogeystyle said:

Can we be sure this Jay dude is not using an Iphone 4?

I can confirm that even on an iPhone 4 this is an exaggeration of an order of magnitude, assuming the app (Apple 2FA is not available on iOS 7) wasn't open.

12 minutes ago, Valentyn said:

snip

How does one press a button on a touchscreen?

[FezBoy]

The crap?

[Thaldor]

This is just nonsense. I could understand if they were suing Apple for the 2FA being limited to Apple devices and/or phone number which in some rare cases can cause problems. But it taking too long? Really? Well, without @DrMacintosh telling in which country this is happening, we don't need any extra tries to guess since there's really only one country where this kind of sue could happen.

[Valentyn]

5 minutes ago, ScratchCat said:

 

How does one press a button on a touchscreen?

 

I've dealt with people like that at work. Actual people with Doctorates, but can't do the basics

[Haaselh0ff]

America: You have the right to sue anyone for anything!

 

Americans: Ooh realllyy....

[Noctus]

41 minutes ago, firelighter487 said:

Apple 2FA is the fastest 2FA i have ever experienced. what is this guy talking about?

Google is pretty damn fast. If anything me fumbling around with my phone to unlock it after i forgot what im doing reqs 2FA is what makes it "slow" 

[Syntaxvgm]

having security HA GET FUCKED APPLE thatll teach yah not to have 2fa. 

Whats the goal? Sue to remove 2fa so someone can sue them for not having it? 

[FezBoy]

4 minutes ago, Syntaxvgm said:

having security HA GET FUCKED APPLE thatll teach yah not to have 2fa. 

Whats the goal? Sue to remove 2fa so someone can sue them for not having it? 

Thanks for the idea, I'm going to get my lawyers ready.

 

Edit: this would require owning an apple device/using their services.  NVM.  you can have it @Noctus