Pretty much anything you do that isn't a complete joke is going to require some money spent on the part of the site. And not a one-time license fee either. You can't send SMS messages to just anyone without hooking into the telco network for that. And I'm pretty sure they charge for that. Some providers have email gateways, but they are specific to a particular carrier. Others don't have any mechanical way to send SMS (other than the above mentioned network) and others still control for spam or let users turn them off entirely. Getting a 5-digit "short code" is, I know, $500 a month. Which makes the spam that's recently been coming that way a bit of a mystery, but whatever.
And then it would require changes to the site code, which is never going to happen. Ultimately, all of this is really to protect the admins and Princess Piche himself, as the average furry has very little of value within their FA account. Journals, watchlists...stuff that's already all public. The only people who end up losing anything in these leaks are popular artists and site admins. And if you think sending a one-time SMS code to FA users to log in (something that would actually incur significant cost for some people who do not have unlimited SMS) is going to stop leaks, you're looking at the problem wrong.
But the point of my post was that HenriW understands none of this and is just saying that because he read the phrase somewhere. He's a dumb kid; that's what kids do. Even if he were serious, there's no way in hell there's ever going to be any overhaul of the auth system on that level. Anyone who's seen the last few years of FA should know that.
You do look at Dragoneer's comments in that journal though and you really get the idea that all these months later, he hasn't done anything meaningful about security and more disturbingly, he doesn't know what to do and doesn't know how to find out. Of course, there is always banning/firing people who he sees as being involved in a specific incident. It's actually kind of amazing, if you consider the severity of what's happened to FA in the last six months. I guess there's always the possibility that the site could finally be destroyed—I'd have said "no way", but then look at what happened to ED. The site's continued existence is basically contingent on Sean Piche's continued employment and financial well being, both of which it has been demonstrated he plays fast and loose with. If he finally got fired for being a lazy ass at work, or if he got kicked out of his apartment, got sick...the possibilities are endless, FA would be gone within months.
