While I agree that this is usually enough, you end up with the issue that with volume the process becomes bogged down to the point of inefficiency. The best bet is to implement this system with a much more robust server side cheat detection, and ideally not send occult information or recieve bad information from the clients to minimize the damage that can be done with a cheat.

After all of this, the reason they gave me was “but I like Windows”.

This is the response I normally get as well, which infuriates me to no end, because it isn’t an actual reason, it is ultimately their decision, and I feel like they are making a mistake out of laziness or perceived comfort.

They shouldn’t start with arch if they don’t want to learn how the system works, endeavor os or cachy os would be my go to’s for arch

Is it just not in the cards to request a separate device for work, I know I would tell my employer that I cannot guarantee that my personal device will meet their expectations.

On occasion I have broken it to the point that I needed to chroot from live USB, but I just chroot and sudo pacman -Syu a couple of hours later and everything sorts itself out. And even if that sounds like a hassle, I can tell you every issue was hardware, I was running endeavor on a USB (not a live env) which is not something I would recommend, because pacman degrades flash memory integrity very quickly, and the only other times I broke it badly enough had to do with nvidia drivers

I fail to see how you couldn’t account for it, in this case you could just enforce facing as a value that is sent to the server and then just use a review like some games have, it wouldn’t protect against large volumes of cheaters, but there are other methods that could be employed for en masse. You wouldn’t necessarily get an instant response, but you would get all of the wallers who aren’t insanely good at hiding it.

You need to invest in server side detection, which is more expensive than slapping their eac bandaid on it and calling it a day.

Have you tried the above yet? Try it.

I fail to see how it would help, the issue arises when I try to use a payment portal like there is for caixa bank transactions, SMS is a valid way for me to sign in to my account, but not to confirm a payment.

And if that doesn’t work contact their customer service and say you don’t have the option to use another device and you need to set up SMS verification or you’re going to have to consider another card. I bet it will work.

I would have to disagree with your take, their customer service is 80% ai and 20% call center, none of the people you would talk to care or have the power to answer a threat like this.

I appreciate the ideas, but at the moment I don’t see a way of getting around my issues.

I mentioned it elsewhere in the comments, but in my experience, payment portals have redirected me to a verification page that has two options app verification and customer support, even though I have SMS setup. I contacted capital one and the rep said it was working as intended.

What is your 2fa method, I cannot sign in to the website without it and the only options I have been presented are SMS and app verification.

I’ve seen a couple of these articles, does anyone know why they choose to aggregate their articles into one page?

I guess it is a matter of semantics at this point, but i take the year of the Linux phone to be when a phone running a Linux os is viable for the masses, which as my original message states is at least 10 years out.

The standard for banks like capital one is, in order to login in a browser you must use their app 2fa, they do not support third party 2fa methods, and their app doesn’t work under compatibility layers. That last part may come with a workaround, but my earlier point is that the normal end user wouldn’t feel comfortable using such a thing if it is not officially allowed.

They also claim you can use 2fa by SMS, but that is first and foremost wrong since it isn’t an option for payment portals, and secondly insecure.

How do you deal with 2fa? For capital one in particular, I don’t believe there is an option not to use their app, and the other banks that I use are in the same boat or adamantly recommend to use their app.

How do you deal with 2fa? For capital one in particular, I don’t believe there is an option not to use their app, and the other banks that I use are in the same boat or adamantly recommend to use their app.

More like 2026 + 10, Linux phones are severely lagging behind, enough so that they are at least 10 years away from having enough adoption for banks and the like to recognize their existence, the annoying truth is that it cannot be mainstream until it is able to use these critical apps with no workarounds as “it works but isn’t allowed” will be the death knell of any amount of mainstream appeal.