Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Authy is joining Twilio

authy.com

Post reply on HN
Print view View original

41–50 of 73 posts

Re: Authy is joining Twilio

#41

Post by bdcravens »

faet wrote: post #39
zacwest wrote: post #34

> "There are few companies who share our dedication to excellence…" Authy is one of the worst-designed iOS applications I have ever used. It has been this way for a very long time. They are actively hostile to people who try to criticize their poor design choices. I would not classify it as "dedicated to excellence." CloudFlare forces me to keep it installed, so I have to interact with it on occasion. If you have mor…

Have you not updated in a while? For me it works fine. I see all the icons for all of my services all the time. Click the one I want and get the number. No Scrolling required. Current screenshot http://i.imgur.com/EzNc2g9.jpg

If you use many services, often with the same company (say multiple Google accounts) it doesn't look that clean; you have many repeating icons. Many of which, you'll get a generic key (if only they'd let me add a custom icon). Then you're stuck with reading that tiny font, which requires several seconds of scanning, even on a 6 Plus.

Re: Authy is joining Twilio

#42

Post by bdcravens »

feld wrote: post #6
danielpal wrote: post #3

Founder of @Authy here. Happy to answer any questions.

Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information. This is not in the spirit of 2FA.

The advantage is that if you lose/switch phones, you don't have to reset your 2FA. (a disadvantage, of course, if your account/device is compromised)

Re: Authy is joining Twilio

#43

Post by mynameisvlad »

feld wrote: post #21
akerl_ wrote: post #15

Earlier quoted context omitted.

What makes Yubikey part of the "default" set but not Authy or RSA? This seems awfully like "If you're going to offer 2FA, at least offer all the tools I like, before you offer any tools that I don't like". It's also worth noting that Authy's app supports TOTP, last I looked.

Because Yubikey is very reasonably priced and they're very open about their design... and don't require you provide any identifying information to own one.

Well, except, you have to buy one from somewhere, and I believe they are only officially being sold through their own site or Amazon. So you are providing your identifying information to some party before even getting the device.

Re: Authy is joining Twilio

#44

Post by ceejayoz »

sjs382 wrote: post #38
zacwest wrote: post #34

> "There are few companies who share our dedication to excellence…" Authy is one of the worst-designed iOS applications I have ever used. It has been this way for a very long time. They are actively hostile to people who try to criticize their poor design choices. I would not classify it as "dedicated to excellence." CloudFlare forces me to keep it installed, so I have to interact with it on occasion. If you have mor…

On Android, it's attractive, functional, and lets me quickly switch between services. I'm not sure what it could do better. FWIW, I have 4 services set up on it.

It's great with four services.

It's awful with dozens. I, for example, have four client AWS accounts, each with the AWS icon, that are rather difficult to distinguish between. The earlier iOS app (with a left-hand side drawer and larger text) was much better for me.

Re: Authy is joining Twilio

#45

Post by alimoeeny »

zacwest wrote: post #34

> "There are few companies who share our dedication to excellence…" Authy is one of the worst-designed iOS applications I have ever used. It has been this way for a very long time. They are actively hostile to people who try to criticize their poor design choices. I would not classify it as "dedicated to excellence." CloudFlare forces me to keep it installed, so I have to interact with it on occasion. If you have mor…

It used to be bad, but at least on iOS they are reasonably good now, I've never felt this way. and I am not very easy to please. Which app are you talking about?

Re: Authy is joining Twilio

#46

Post by [deleted] »

rtpg wrote: post #13
feld wrote: post #2

What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following: * TOTP * Yubikey * SMS If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following: * Authy * RSA * etc I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.

You do realise that with authy you're just registering TOTP stuff right? It's not on the same level as what you're mentioning. It's like complaining about having to use Firefox instead of google.com

[deleted]

Re: Authy is joining Twilio

#48

Post by philip1209 »

When I first tried Authy, I was amused by bluetooth sync for OTPs. Then, when I tried hardware TSV like yubikeys, I realized that Authy was only a marginal improvement in technology, while it would take a complete rethinking of the system - e.g. Yubikey - to scale to dozens of accounts, multiple devices, and corporate adoption.

Re: Authy is joining Twilio

#49

Post by sswaner »

danielpal wrote: post #7
feld wrote: post #6

Earlier quoted context omitted.

Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information. This is not in the spirit of 2FA.

Hi, good question. The reason for the phone number is that we depend on your phone number as part of your identity. Almost all 2-FA systems today use the phone number as a way to send you the code via text/phone call. If you read my blog post: blog.authy.com/twilio you'll see we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous. I also understand why some people don't…

> we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous.

I am not very familiar with Authy, but I have built pin-code 2FA solutions using Twilio. Based on your comments, I am not sure the point of Authy if it is easy to build 2FA except TOTP using yesterday's Twilio.

Re: Authy is joining Twilio

#50

Post by ChrisClark »

bdcravens wrote: post #41
faet wrote: post #39

Earlier quoted context omitted.

Have you not updated in a while? For me it works fine. I see all the icons for all of my services all the time. Click the one I want and get the number. No Scrolling required. Current screenshot http://i.imgur.com/EzNc2g9.jpg

If you use many services, often with the same company (say multiple Google accounts) it doesn't look that clean; you have many repeating icons. Many of which, you'll get a generic key (if only they'd let me add a custom icon). Then you're stuck with reading that tiny font, which requires several seconds of scanning, even on a 6 Plus.

There seems to be two types of people here who like/dislike it. With few services they love the new design, and with a lot they hate it. The Android app was also updated to the square icons on the bottom, the drawer was much better if you had a lot of services added.
Post reply on HN