I am an international student and I literally hate when they don't let me put in 2 different numbers. I get locked out when I travel. For example, twitter
Use Google Voice or some other similar service that'll let you receive SMS via the web.
Two-factor Authentication
21–30 of 94 posts
Re: Two-factor Authentication
#22It's great to see another big web service implementing two-factor authentication. Looks like 2FA is going to be a standard option in web apps in the near future.
I'm really glad that they didn't go the Twitter route and develop something completely new.
How is twitter's 2fa completely new? I use it and it behaves exactly like Google's does.
Re: Two-factor Authentication
#23What's the best hardware TOTP token to get?
Re: Two-factor Authentication
#24I am an international student and I literally hate when they don't let me put in 2 different numbers. I get locked out when I travel. For example, twitter
Use Google Voice or some other similar service that'll let you receive SMS via the web.
Wow thanks for that. I have Google voice account for forever and never thought about this.
Edit: This also connects every other account to my Google account, so I should only worry the Google account.
Re: Two-factor Authentication
#25Nice. Wish it integrated with Authy though
Nope, nope nope nope nope. Authy's latest "innovation" where bluetooth on the host can grab a new code from your mobile device provides a direct link between your two factors (reducing them to one). I don't think their team understands much about the problem they're trying to solve and they seem to be watering down the security of the product to attract new users instead. DUO and plain TOTP are really the only ways t…
Agreed.
For those who missed it before, from a previous discussion on Authy:
> You're correct - there are serious security concerns with Authy's product, which were pointed out on an earlier HN thread: https://news.ycombinator.com/item?id=4916983
>Personally, I'd be concerned with trusting my credentials with any company unless all members of the leadership team (yes, including "nontech" people) are incredibly familiar with basic security terminology and practices.
> (Note that the founder is unclear when PBKDF2 and AES are being used in the product, which is concerning, because they have very different use cases and should be hard to confuse).
Re: Two-factor Authentication
#26Great move by the GitHub team! Glad to see they went with TOTP rather than SMS-only. As they mentioned on their site, Duo Security's mobile application supports TOTP and we'll have an Octocat logo in soon :)
Re: Two-factor Authentication
#27its very good to see github adding 2FA, but I wish they could also support their Indian users for using it via SMS.
edit : genuinely interested to know why they are not able to support SMS in some countries and mainly India.
Re: Two-factor Authentication
#28Earlier quoted context omitted.
You can certainly use your Authy app for it, it's just Authenticator.
I would also suggest that any iOS users move away from Google Authenticator and towards Authy or another solution. Google Auth in iOS7 has been deleting labels, and even worse, deleting tokens, for many users. The app hasn't been updated since 2011 and there's been no word from Google on an upcoming update to fix the issue. With iOS7's launch/announcement next week, I suggest looking into a new TOTP app (like Authy)…
I had all of those problems with Google Auth on iOS7. I just installed Authy and it seems to work great. I'd have paid $1-3 for it. I disabled the bluetooth feature though.
Re: Two-factor Authentication
#29Earlier quoted context omitted.
I'm really glad that they didn't go the Twitter route and develop something completely new.
How is twitter's 2fa completely new? I use it and it behaves exactly like Google's does.
Since they don't use TOTP it's not possible to use their two-factor authentication with applications such as Google Authenticator or Authy. What's more, I don't think it even works with third-party Twitter clients (Correct me if I'm wrong), so you have to use Twitter's own apps.
Re: Two-factor Authentication
#30Earlier quoted context omitted.
I'm really glad that they didn't go the Twitter route and develop something completely new.
How is twitter's 2fa completely new? I use it and it behaves exactly like Google's does.
When they rolled it out, it was SMS-only. It still doesn't use TOTP - they've baked something into their mobile app that allows it to function as the second factor, rather than just supporting the same 2FA scheme that everyone else does.