Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3

mdf

1967 posts

Uber Geek
+1 received by user: 580

Trusted
Subscriber

  Reply # 1621002 1-Sep-2016 18:10
One person supports this post
Send private message

Green!

 

This is a really cool idea. I've thought for a long time that passwords were the next best thing to broken as a means of authentication so any developments would be very welcome. You've certainly got the right audience to be trialling this sort of technology.

 

If I can make a suggestion (though I fully appreciate that this would cost time and money but just getting it out there. Might plant a seed), a yes/no app would be even better than an email link. Try and log on to something, then press a button on an app, and in. Maybe behind a PIN code stored on the device or something?




BDFL - Memuneh
61329 posts

Uber Geek
+1 received by user: 12071

Administrator
Trusted
Geekzone
Lifetime subscriber

1 post

Wannabe Geek

Trusted
ThisData

  Reply # 1622915 5-Sep-2016 10:07
Send private message

mdf:

 

If I can make a suggestion (though I fully appreciate that this would cost time and money but just getting it out there. Might plant a seed), a yes/no app would be even better than an email link. Try and log on to something, then press a button on an app, and in. Maybe behind a PIN code stored on the device or something?

 

 

 

 

FWIW, this is pretty much how Authy and Duo do their "one touch" second factor authentications. So instead of typing in a 2FA code, you press a button. https://www.authy.com/product/options/




BDFL - Memuneh
61329 posts

Uber Geek
+1 received by user: 12071

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1622918 5-Sep-2016 10:21
Send private message

I have implemented a webhook so our server is now notified of login anomalies as they happen. I am currently gauging this and number of occurrences. I wanted to have a headstart on coding something last weekend but life (and a tooth extraction) got in the way...







BDFL - Memuneh
61329 posts

Uber Geek
+1 received by user: 12071

Administrator
Trusted
Geekzone
Lifetime subscriber



BDFL - Memuneh
61329 posts

Uber Geek
+1 received by user: 12071

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1630579 15-Sep-2016 00:28
Send private message
Minimalist
5489 posts

Uber Geek
+1 received by user: 418

Moderator
Trusted
Lifetime subscriber

  Reply # 1630595 15-Sep-2016 05:00
Send private message

freitasm:

If you want to test the 2FA enable/disable pages (not login yet) then you can try this 



Please post feedback on the process here.



Easy!

260 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1630614 15-Sep-2016 08:05
Send private message

freitasm:

 

If you want to test the 2FA enable/disable pages (not login yet) then you can try this 

 

Please post feedback on the process here.

 

 

Done. Very easy to set up.


2970 posts

Uber Geek
+1 received by user: 288


  Reply # 1630632 15-Sep-2016 08:44
Send private message

Done.

 

Same as any other 2FA setup with the Google Authenticator app, easy to do.

 

 





760 posts

Ultimate Geek
+1 received by user: 224


  Reply # 1630635 15-Sep-2016 08:51
Send private message

Enabled and tested without issue - except for not having a Google-Auth-compatible barcode scanner on my device, but that is not GZ's problem :)


351 posts

Ultimate Geek
+1 received by user: 128

Subscriber

  Reply # 1630755 15-Sep-2016 10:42
Send private message

Quick and easy, set it up with Authenticator Plus on Android. Tested just fine after set up. Quick and easy. 


1735 posts

Uber Geek
+1 received by user: 393

Trusted
Subscriber

  Reply # 1630757 15-Sep-2016 10:46
Send private message

freitasm:

 

If you want to test the 2FA enable/disable pages (not login yet) then you can try this 

 

Please post feedback on the process here.

 

 

 

 

Took 30 seconds for me, although I find it amusing I need to have a record of the recovery code somewhere. I'll write it on a post-it note and attach to the side of my desk tongue-out





________

 

Antonios K

 

 

 

Click to see full size




BDFL - Memuneh
61329 posts

Uber Geek
+1 received by user: 12071

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1630765 15-Sep-2016 11:02
Send private message

You don't have recovery codes?

 

I have records of recovery codes for Google, Dropbox, Microsoft, Evernote, TeamViewer, Trello, Twitter, Xero, IFTTT, Zoho, Buffer, Slack. 

 

You can't rely on password to reset a 2FA because your email could've been compromised and a simple password reset email can then be used to change password and disable 2FA.

 

Think beyond the square life you live...





760 posts

Ultimate Geek
+1 received by user: 243

Trusted
Subscriber

  Reply # 1630781 15-Sep-2016 11:22
Send private message

2FA works for me.


4053 posts

Uber Geek
+1 received by user: 535

Trusted

  Reply # 1630911 15-Sep-2016 13:40
Send private message

Boo, no logo in Authy for Geekzone.





Previously known as psycik

NextPVR: 
Gigabyte AMD A8 Brix --> Samsung LA46A650D via HDMI, NextPVR,
OpenHAB: ODroid C2 eMMC DriveOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 2012 
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.