Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Two Factor Auth List of Websites

twofactorauth.org

Post reply on HN
Print view View original

11–20 of 65 posts

Re: Two Factor Auth List of Websites

#13

Post by CiPHPerCoder »

I worked on an open source CMS called Airship and we decided to include 2FA in our v1.0 release. After a bit of research (mostly to conclusively rule out SMS-based 2FA), I found that it was actually very easy to implement.

I started working on a vendor-agnostic 2FA implementation for PHP projects.

https://github.com/paragonie/multi_factor

It's far from complete, but hopefully it makes it easier for others to add 2FA to their projects.

If anyone's interested in the open source CMS I mentioned: https://github.com/paragonie/airship

Re: Two Factor Auth List of Websites

#14

Post by daveguy »

TradeKing definitely needs to be added to this list. They should be prominently featured at the top in a security hall of shame for their cartoonish security.

Edit, examples:

No 2 factor authentication

Displaying the answers to your security questions in multiple choice form (with a none of the above option, but usually including your answer).

Requiring your password to be entered with mouse clicks at an on-screen keyboard. Not kidding.

Those ridiculous "anti-phishing" pics.

TradeKing is the definition of security theatre.

Do not use TradeKing.

Re: Two Factor Auth List of Websites

#15

Post by dazc »

waldfee wrote: post #10
libeclipse wrote: post #8

Still waiting on Amazon UK to enable two-factor authentication.

login on amazon.com, enable 2fa there. now 2fa is also active on amazon uk, and the option also appears in the settings. stupid but works

Stupid indeed but certainly works as described. Thanks for the tip!

Re: Two Factor Auth List of Websites

#16

Post by gore90- »

waldfee wrote: post #10
libeclipse wrote: post #8

Still waiting on Amazon UK to enable two-factor authentication.

login on amazon.com, enable 2fa there. now 2fa is also active on amazon uk, and the option also appears in the settings. stupid but works

Ah. I didn't know that. I just got it setup. Thanks.

Re: Two Factor Auth List of Websites

#17

Post by laurencei »

CiPHPerCoder wrote: post #13

I worked on an open source CMS called Airship and we decided to include 2FA in our v1.0 release. After a bit of research (mostly to conclusively rule out SMS-based 2FA), I found that it was actually very easy to implement. I started working on a vendor-agnostic 2FA implementation for PHP projects. https://github.com/paragonie/multi_factor It's far from complete, but hopefully it makes it easier for others to add 2FA…

FYI - the correct link is: https://github.com/paragonie/multi_factor

Re: Two Factor Auth List of Websites

#19

Post by CiPHPerCoder »

laurencei wrote: post #17
CiPHPerCoder wrote: post #13

I worked on an open source CMS called Airship and we decided to include 2FA in our v1.0 release. After a bit of research (mostly to conclusively rule out SMS-based 2FA), I found that it was actually very easy to implement. I started working on a vendor-agnostic 2FA implementation for PHP projects. https://github.com/paragonie/multi_factor It's far from complete, but hopefully it makes it easier for others to add 2FA…

FYI - the correct link is: https://github.com/paragonie/multi_factor

Thanks! I'm not sure why I didn't copy/paste. :)
Post reply on HN