Suggestion for this is pretty simple - if you have an ex-moderator / ex-administrator rank, you must enable 2FA on your account, or basically just lose your ex-staff rank + your user centre privileges that you get from them (if any).
The reason for this is because there's been quite a few hacked Sythe accounts lately that are ex-staff ones used to scam (and on the odd chance they're all intentional scams, they should have 2FA enabled anyway so they can't fake a hacking).
A further reason is that 2FA is pretty damn secure, compared to e-mail which is possible to get into. Even if you never intend to return to the staff or are inactive, you are still hosting some form of trust on your profile as you once served on the staff, so you would still be expected to be trusted to some extent (and the ex-soandso ranks are still worth some trust on here).
Staff also need to consider if someone gets hold of a hacked ex-staff account that what they plan to do with it. Most would just scam, but the smarter ones might try and use an IP similar to what they normally log onto. Then they would post around a bit to make it seem like they were "back". Then PM an admin and say they'd like to return to staff, most ex-staff get back on if they become active again, so they get promoted and boom! You have a scammer running a moderator account. Imagine if this happened on a ex-admin account, sure they wouldn't jump up to admin, but they could possibly snatch a Global position. I know there's background checks, but I think they are only done so in-depth on new staff candidates, rather than returning.
Richard (Sythe) even made a thread recently asking why users who didn't have it enabled already, didn't - http://www.sythe.org/community-input/1828157-if-you-have-not-enabled-2fa-why-havent-you.html
2FA isn't really a hassle to set up and there is really no genuine reason not to enable it. Just about everyone has a smart phone these days.
OMMs I'm assuming already have it as a requirement, staff would already have it + "other" protections and fun ranks aren't really considered trustworthy ranks.
Note that THREE ex-staff have been banned recently for presumably having their accounts hacked and used to scam - Amethyst, MegaMatt and Wolfdog (Ryan and Scottay have also seemingly been hacked recently.) One has even stated he'll likely never come back to Sythe as he can't repay it - http://www.sythe.org/introductions-farewells/1833685-wolfdogs-farewell-thanks.html
What do we all think? Ideally, everyone should have it enabled, but those with trusted ranks should all the more have it. Remember: Ex-Staff still represent the current staff + site overall in some form, if account hackings are popping up for them all the time, it doesn't look great.
The reason for this is because there's been quite a few hacked Sythe accounts lately that are ex-staff ones used to scam (and on the odd chance they're all intentional scams, they should have 2FA enabled anyway so they can't fake a hacking).
A further reason is that 2FA is pretty damn secure, compared to e-mail which is possible to get into. Even if you never intend to return to the staff or are inactive, you are still hosting some form of trust on your profile as you once served on the staff, so you would still be expected to be trusted to some extent (and the ex-soandso ranks are still worth some trust on here).
Staff also need to consider if someone gets hold of a hacked ex-staff account that what they plan to do with it. Most would just scam, but the smarter ones might try and use an IP similar to what they normally log onto. Then they would post around a bit to make it seem like they were "back". Then PM an admin and say they'd like to return to staff, most ex-staff get back on if they become active again, so they get promoted and boom! You have a scammer running a moderator account. Imagine if this happened on a ex-admin account, sure they wouldn't jump up to admin, but they could possibly snatch a Global position. I know there's background checks, but I think they are only done so in-depth on new staff candidates, rather than returning.
Richard (Sythe) even made a thread recently asking why users who didn't have it enabled already, didn't - http://www.sythe.org/community-input/1828157-if-you-have-not-enabled-2fa-why-havent-you.html
2FA isn't really a hassle to set up and there is really no genuine reason not to enable it. Just about everyone has a smart phone these days.
OMMs I'm assuming already have it as a requirement, staff would already have it + "other" protections and fun ranks aren't really considered trustworthy ranks.
Note that THREE ex-staff have been banned recently for presumably having their accounts hacked and used to scam - Amethyst, MegaMatt and Wolfdog (Ryan and Scottay have also seemingly been hacked recently.) One has even stated he'll likely never come back to Sythe as he can't repay it - http://www.sythe.org/introductions-farewells/1833685-wolfdogs-farewell-thanks.html
What do we all think? Ideally, everyone should have it enabled, but those with trusted ranks should all the more have it. Remember: Ex-Staff still represent the current staff + site overall in some form, if account hackings are popping up for them all the time, it doesn't look great.
