Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3
BDFL - Memuneh
63891 posts

Uber Geek
+1 received by user: 14357

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2270747 5-Jul-2019 21:25
Send private message quote this post


250 posts

Master Geek
+1 received by user: 6


  # 2270753 5-Jul-2019 21:31
Send private message quote this post

Jase2985:

30 seconds is fine for millions of people on hundreds of different services that use this type of authentication. keeping the code after 30 seconds defeats the purpose of having the 30 second time limit in the first place and is not how this is suppose to work


you seem to be the only one having issues here, it looked like i was having the same issues then i worked out it was a time error between devices, reset the time on the 2 PC's and it was gone.


your symptoms seem almost identical.


+ you havent answered some of the above questions, how much different is the time remaining for the code in the desktop app vs the phone app?


 



If 60 seconds (which is the minimum time to discard that I've ever previously encountered with a 2FA login server) is too short to be safe, then I use a couple of dozen other services with 2FA that are by your definition unsafe. These services you consider unsafe in their time to discard included Apple, Microsoft, Facebook, and Steam, to name just four of the many I use.

Also: I have twice answered your question about the time differential. Most recently tonight. So you're not making any sense, mate.




"The surest sign that intelligent life exists elsewhere in the universe is that it has never tried to contact us."

 

- Calvin and Hobbes (Bill Watterson)

 
 
 
 




250 posts

Master Geek
+1 received by user: 6


  # 2270758 5-Jul-2019 21:46
Send private message quote this post

freitasm:

Did you enable the 2FA code using the mobile app or the desktop app?



It's been many months, but I want to say on the mobile.

Also: this 30 second time to discard isn't just a problem with the time differential I'm experiencing between desktop and mobile Authy apps. It also affects mobile Authy, since the time to discard is so very short, if I try to copy and paste a code just before it is replaced with a new one in mobile Authy, it has already expired if I take more than a few seconds to get back to the mobile web browser I'm trying to login to Geekzone with.

I encountered this most recently while testing Authy and Geekzone login in iOS web browsers earlier today. My iOS device is older and has only 1GB of RAM, so copying the code in Authy, switching between apps, re-acquiring focus in the 2FA code field, and pasting can take several seconds.

No offence, but whoever configured a hard-coded an absurdly short limit of 30 seconds to expire codes, is not making sensible IT decisions. But it's not like any of this is a major deal, anyway. Geekzone is not a site with my financial or secure personal data. The easy fix is simply for me to disable 2FA for Geekzone, since it is badly implemented. Or only use mobile Authy and be aware codes expire way too quickly, so never to use a code near to being replaced. I expect I'll do whatever annoys me the least.

Just to add: I get you're saying this isn't a time limit you've personally chosen. My disdain falls upon whoever setup the service you use. Not on you :-)




"The surest sign that intelligent life exists elsewhere in the universe is that it has never tried to contact us."

 

- Calvin and Hobbes (Bill Watterson)

8662 posts

Uber Geek
+1 received by user: 2979

Lifetime subscriber

  # 2270759 5-Jul-2019 21:49
Send private message quote this post

freitasm:

Did you enable the 2FA code using the mobile app or the desktop app?



I enabled it from my phone. I then tried to use the desktop app to log into the site and it came up with authentication failed. from there I used my phone and it's code and it allows me to login I then noticed at the code on my phone was different to the one on the desktop. but when I first open the app the codes were the same. after the time ran out the desktop it reset on the same code but with 30 more seconds so it was out by approximately 28 seconds.I checked the time difference between my phone and the desktop he was approximately a 2 second difference I then reset the time on my desktop to the same as that on my phone and then I had no issues with the code being different on the phone and the desktop.

so my issue was a time difference between my phone and the desktop of approximately 2 seconds.

8662 posts

Uber Geek
+1 received by user: 2979

Lifetime subscriber

  # 2270765 5-Jul-2019 22:01
Send private message quote this post

you can keep going on about the 30 second time difference but hundreds of different sites use that as their time base so that's not the issue here. just learnt not to copy the code when use less than 10 seconds left and you can't make it over to paste it into the other window and time.

Does the phone app and the desktop app have the same code on a screen at the same time? I'm guessing not because you say there is a 31 second time difference

Try this:
1. Open the mobile authy app select geekzone
2. watch the code in when it resets to the next code open the authy desktop app
3. Are the codes the same?
4. if they are the same keep watching till they click over to the next code are they both on the same code? or did one reset the time but not change the code?
5. Is the countdown timer the same? All slightly different?
6. if they are different I would check the windows clock vs the phone clock and confirm that they are on exactly the same time. if not reset the windows clock to that of the phone clock to make sure they are in sync.

That is what I did and then as what fixed my issue. Wasn't just happening for geekzoneI either it was happening for all the sites I use authy for.



250 posts

Master Geek
+1 received by user: 6


  # 2270817 5-Jul-2019 22:12
Send private message quote this post

Jase2985: you can keep going on about the 30 second time difference but hundreds of different sites use that as their time base so that's not the issue here. just learnt not to copy the code when use less than 10 seconds left and you can't make it over to paste it into the other window and time.

Does the phone app and the desktop app have the same code on a screen at the same time? I'm guessing not because you say there is a 31 second time difference

Try this:
1. Open the mobile authy app select geekzone
2. watch the code in when it resets to the next code open the authy desktop app
3. Are the codes the same?
4. if they are the same keep watching till they click over to the next code are they both on the same code? or did one reset the time but not change the code?
5. Is the countdown timer the same? All slightly different?
6. if they are different I would check the windows clock vs the phone clock and confirm that they are on exactly the same time. if not reset the windows clock to that of the phone clock to make sure they are in sync.

That is what I did and then as what fixed my issue. Wasn't just happening for geekzoneI either it was happening for all the sites I use authy for.


I have already stated that there is no clock difference between my devices, a few times now; but there is a time differential between code display in Authy apps, with my having stated I witness desktop Authy displaying the codes later than mobile Authy, with my having further stated above that I witnessed a 31 second time differential in code display today, and 28 seconds yesterday.

I cannot be clearer than I have already been in both this post and previously. I have stated these facts in black and white multiple times now. I do not know what else I can do for you.




"The surest sign that intelligent life exists elsewhere in the universe is that it has never tried to contact us."

 

- Calvin and Hobbes (Bill Watterson)

513 posts

Ultimate Geek
+1 received by user: 172

Lifetime subscriber

  # 2270853 6-Jul-2019 08:28
One person supports this post
Send private message quote this post

I have also had trouble in the past and I suspect due to the same issue. Eventually realised that the threat model for my Geekzone login doesn't justify such drastic security measures so I turned it off.


 
 
 
 


8662 posts

Uber Geek
+1 received by user: 2979

Lifetime subscriber

  # 2270857 6-Jul-2019 08:37
Send private message quote this post

Baboon:
Jase2985: you can keep going on about the 30 second time difference but hundreds of different sites use that as their time base so that's not the issue here. just learnt not to copy the code when use less than 10 seconds left and you can't make it over to paste it into the other window and time.

Does the phone app and the desktop app have the same code on a screen at the same time? I'm guessing not because you say there is a 31 second time difference

Try this:
1. Open the mobile authy app select geekzone
2. watch the code in when it resets to the next code open the authy desktop app
3. Are the codes the same?
4. if they are the same keep watching till they click over to the next code are they both on the same code? or did one reset the time but not change the code?
5. Is the countdown timer the same? All slightly different?
6. if they are different I would check the windows clock vs the phone clock and confirm that they are on exactly the same time. if not reset the windows clock to that of the phone clock to make sure they are in sync.

That is what I did and then as what fixed my issue. Wasn't just happening for geekzoneI either it was happening for all the sites I use authy for.


I have already stated that there is no clock difference between my devices, a few times now; but there is a time differential between code display in Authy apps, with my having stated I witness desktop Authy displaying the codes later than mobile Authy, with my having further stated above that I witnessed a 31 second time differential in code display today, and 28 seconds yesterday.

I cannot be clearer than I have already been in both this post and previously. I have stated these facts in black and white multiple times now. I do not know what else I can do for you.

 

 

 

humor me and do the above and answer the questions. there is something missing.

 

 

 

im trying to help so stop getting your back up. the above worked for me and your symptoms appear identical so maybe just try it.

 

 

 

 


BDFL - Memuneh
63891 posts

Uber Geek
+1 received by user: 14357

Administrator
Trusted
Geekzone
Lifetime subscriber

gzt

10815 posts

Uber Geek
+1 received by user: 1813


16 posts

Geek
+1 received by user: 2


  # 2272435 9-Jul-2019 15:42
Send private message quote this post

It certainly seems to be a bug in the desktop app.  The code is the same when a token is opened simultaneously on the android app and the desktop app but the desktop app rolls the same code over into the next 30 sec period, making it 30 secs out of sync thereafter.  Clicking the back arrow and reopening the token in the desktop app will realign the code and the countdown with the android app but because the desktop token is newly reopened it will again fail to update the code after the first timeout. 




250 posts

Master Geek
+1 received by user: 6


  # 2272439 9-Jul-2019 15:50
One person supports this post
Send private message quote this post

I filed a support request to the Authy team, and today received the following:

"Thanks for reaching out to Authy support. We greatly appreciate you taking the time to write to us.

Unfortunately, our desktop version does have a bug that's has been recently spotted, which prevents the tokens from updating on the first 30 seconds.

I have added your voice to our internal ticket to have it fixed and I apologize for the inconveniences it may be causing you.

I'm sincerely sorry, but I am not able to give you an approximate date for this fix to be deployed since our product schedule is pretty tight at the moment. However, I can assure you that our team is always working on improving our performance and user's experience and that this will be taken care of as soon as possible.

In the meantime, disabling and enabling the automatic time settings in your device could help, as well as reinstalling the application. Also, navigating away from the token and then opening it again, forces the synchronization.

Please let me know if you have additional questions. I'll be glad to help."

However, their suggestions on forcing a sync do not work for me.




"The surest sign that intelligent life exists elsewhere in the universe is that it has never tried to contact us."

 

- Calvin and Hobbes (Bill Watterson)

BDFL - Memuneh
63891 posts

Uber Geek
+1 received by user: 14357

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2272440 9-Jul-2019 15:55
2 people support this post
Send private message quote this post

Baboon: Unfortunately, our desktop version does have a bug that's has been recently spotted, which prevents the tokens from updating on the first 30 seconds.

I'm sincerely sorry, but I am not able to give you an approximate date for this fix to be deployed since our product schedule is pretty tight at the moment. However, I can assure you that our team is always working on improving our performance and user's experience and that this will be taken care of as soon as possible.

 

 

Crappy answer. It's a serious bug. It keeps people out of their services. In between putting a new feature or fixing this bug, I'd go with the fix.





428 posts

Ultimate Geek
+1 received by user: 173

Subscriber

  # 2272564 9-Jul-2019 18:20
One person supports this post
Send private message quote this post

Baboon:

I'm sincerely sorry, but I am not able to give you an approximate date for this fix to be deployed since our product schedule is pretty tight at the moment.

 

 

 

That's completely inexcusable to me. If there is a app breaking bug it should supersede any product schedule.




250 posts

Master Geek
+1 received by user: 6


  # 2274475 11-Jul-2019 10:25
Send private message quote this post

Another response:

"Thanks for your understanding.

However, I have been informed that due to a very tight schedule and new API releases, our team has put on hold all Desktop app updates indefinitely.

For this reason, I'm not able to provide a date for this fix, but I don't think it will happen this year. I'm very sorry to communicate this and I hope our team will be able to resume updates on this version soon.

I apologize for the inconvenience, and hope that navigating away from the token and then opening it again, will help you have a better experience with the desktop app.

Best regards,
Dalia Molina
Ppl. Support - Account Security Solutions"




"The surest sign that intelligent life exists elsewhere in the universe is that it has never tried to contact us."

 

- Calvin and Hobbes (Bill Watterson)

1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.