Live data from Hacker News

Authy: Faster Two-Factor Authentication

authy.com

31–40 of 99 posts

Re: Authy: Faster Two-Factor Authentication

#32
post #27

I love the concept of this, but I'm out of the use case for the time being (Windows / Linux user). The other key annoyance is that none of my desktop computers have bluetooth, because I built them for gaming, not wireless peripherals. That being said, you probably already thought about using a centralized server or other methods of communication. Either it'll kill battery, or require some intermediary server - which…

> none of my desktop computers have bluetooth

USB based bluetooth dongles are dirt cheap, so this should not be an expensive or otherwise overly inconvenient issue to resolve.

Re: Authy: Faster Two-Factor Authentication

#33

A word about the website: The video is really great, enjoyable and fresh (very positive vibe, extremely well executed). But I'd rather see something different than a (blurry) image of the founder looking somewhere off screen. I mean it's "personal", I get it - but this can be improved. While this might sound superficial, it's the first thing that came to my mind ...

:). That's not me. I wish I was as good looking as the actor in the video. I am here: www.authy.com/about.

Hey fellow Purdue grad!

Re: Authy: Faster Two-Factor Authentication

#34
I really don't like giving out my phone number to a small company with no apparent revenue model, no matter what they are saying they are going to do or not do with that number.

Sorry for being cynical, but judging from all these services coming and going all over the place, any of the following is going to happen within a year: 1) authy gets bought by $COMPANY. With some likelihood it's not a company I want to have my phone number. 2) authy runs out of money and needs a revenue stream. Thus it changes the TOS and starts selling phone numbers. 3) authy shuts down. Who knows what's going to happen with my phone number then.

No. I'd rather use any other HOTP app that doesn't require any personal data (which is one of the basic ideas behind HOTP).

Authentication and my phone number are the two things you have to really prove you have got your act together before I trust you with them.

Re: Authy: Faster Two-Factor Authentication

#36
post #27

I love the concept of this, but I'm out of the use case for the time being (Windows / Linux user). The other key annoyance is that none of my desktop computers have bluetooth, because I built them for gaming, not wireless peripherals. That being said, you probably already thought about using a centralized server or other methods of communication. Either it'll kill battery, or require some intermediary server - which…

> none of my desktop computers have bluetooth USB based bluetooth dongles are dirt cheap, so this should not be an expensive or otherwise overly inconvenient issue to resolve.

I think he is saying that it isn't worth it/ too inconvenient to go out and get a bluetooth dongle just for this app.

Re: Authy: Faster Two-Factor Authentication

#38
post #10

Earlier quoted context omitted.

A lot of us are familiar with two factor authentication with Google Authenticator. Could you give us a run through of the differences between GA and Authy? What are the advantages of Authy over GA? Edit: suggestions - do not ask for cellphone number twice. Sending SMS PIN as a link is a bit weird.

You can see: http://blog.authy.com/authenticator But in general terms: 1. Authy tokens automatically sync even if you lose, change or upgrade phone. 2. Ability to do encrypted backups of Google Auth tokens. Same as above, they will sync if you lose, change or upgrade phone. 3. Bluetooth: Takes the hassle out of Two-Factor Auth. 4. Automatic time sync: Always makes sure your tokens work no matter what. 5. Key Rotation…

> 1. Authy tokens automatically sync even if you lose, change or upgrade phone.

So the tokens are stored on Authy's servers? Doesn't that defeat the purpose of two-factor? How do I (or an attacker) recover my tokens if I loose my phone?

Re: Authy: Faster Two-Factor Authentication

#39
post #10

Earlier quoted context omitted.

A lot of us are familiar with two factor authentication with Google Authenticator. Could you give us a run through of the differences between GA and Authy? What are the advantages of Authy over GA? Edit: suggestions - do not ask for cellphone number twice. Sending SMS PIN as a link is a bit weird.

You can see: http://blog.authy.com/authenticator But in general terms: 1. Authy tokens automatically sync even if you lose, change or upgrade phone. 2. Ability to do encrypted backups of Google Auth tokens. Same as above, they will sync if you lose, change or upgrade phone. 3. Bluetooth: Takes the hassle out of Two-Factor Auth. 4. Automatic time sync: Always makes sure your tokens work no matter what. 5. Key Rotation…

Does the Bluetooth pairing functionality only work for OS X?
Post reply on HN