Live data from Hacker News

Authy: Faster Two-Factor Authentication

authy.com

11–20 of 99 posts

Re: Authy: Faster Two-Factor Authentication

#11
Assuming an attacker has complete control over your computer, and your phone is within bluetooth range, can he make the phone generate a token without user interaction?

I was assuming the user would have to click a button on the phone or something, but I couldn't see it in the video.

Re: Authy: Faster Two-Factor Authentication

#13

Possibly silly question, but how do you intend to make money from this? The mobile app is free, the desktop app is free, and once I have them installed, I don't have any more communication with you or your servers, right?

Hi, we already do. We charge websites, banks and apps to enable two-factor auth on their sites. See https://www.authy.com/developer/pricing.

Re: Authy: Faster Two-Factor Authentication

#14

Earlier quoted context omitted.

Probably. At this point we are testings things out and want to move as fast as possible. We want to make Two-Factor Authentication completely transparent, and we'll be launching other exciting things to see how they work in the real world. Once we have the experience nailed out, we'll ported to other platforms.

I hope you are planning a Linux release too. So many companies leave us out, even though we're even more willing to work past bugs and set things up correctly.

Presumably their is an HTML5 app available?

Re: Authy: Faster Two-Factor Authentication

#15
I've been using authy for months since it handles 2-factor auth for dnsimple. Just saw the update that supports bluetooth come in on the App Store this morning. Congrats to the team on this big release!

One thing that's nice about seeing a modern two-factor auth app with a solid business model behind it, is that Google seems to have abondoned their Authenticator app - no releases since 2011, doesn't yet work properly on iOS 7.

Re: Authy: Faster Two-Factor Authentication

#16

Possibly silly question, but how do you intend to make money from this? The mobile app is free, the desktop app is free, and once I have them installed, I don't have any more communication with you or your servers, right?

Hi, we already do. We charge websites, banks and apps to enable two-factor auth on their sites. See https://www.authy.com/developer/pricing .

Ah, I see, thank you.

Another question: If for some reason, your company shut down tomorrow morning, what would that mean for users of your app? Would it stop working?

Re: Authy: Faster Two-Factor Authentication

#17
I've tried to setup Authy using bluetooth, but I failed :(. Mac OSX 10.8 on Macbook Air, iOS 7 on iPhone 4S. It did ask me on the phone to give access for Bluetooth to Authy, which I approved. But On the desktop app there is an empty list of devices and nothing else shows on my phone's screen.

Re: Authy: Faster Two-Factor Authentication

#19
post #10

Hi, I'm Daniel, Authy Founder. We've worked almost 18 months on this product, it's surreal to finally see it out. Anyway, you can read more about why we did this here: http://blog.authy.com/thefuture

A lot of us are familiar with two factor authentication with Google Authenticator. Could you give us a run through of the differences between GA and Authy? What are the advantages of Authy over GA? Edit: suggestions - do not ask for cellphone number twice. Sending SMS PIN as a link is a bit weird.

You can see: http://blog.authy.com/authenticator

But in general terms:

1. Authy tokens automatically sync even if you lose, change or upgrade phone.

2. Ability to do encrypted backups of Google Auth tokens. Same as above, they will sync if you lose, change or upgrade phone.

3. Bluetooth: Takes the hassle out of Two-Factor Auth.

4. Automatic time sync: Always makes sure your tokens work no matter what.

5. Key Rotation: We can automatically rotate keys if masters are compromised.

6. Privacy: WE DO NOT TRACK app usage or anything like it. We don't share data with anyone. Compare it to GAuth privacy policy.

Re: Authy: Faster Two-Factor Authentication

#20
post #15

I've been using authy for months since it handles 2-factor auth for dnsimple. Just saw the update that supports bluetooth come in on the App Store this morning. Congrats to the team on this big release! One thing that's nice about seeing a modern two-factor auth app with a solid business model behind it, is that Google seems to have abondoned their Authenticator app - no releases since 2011, doesn't yet work properly…

All this nonsense about applications not working on iOS 7 is beginning to grind my gears. Developers aren't currently allowed to submit their apps for iOS 7. The beta is still in early stages. It'll change. A lot. Chances are that if you're complaining about applications not working on iOS 7 you shouldn't have the beta build on your phone in the first place.
Post reply on HN