Thoughts on Twitter's new Two-Factor Authentication
blog.authy.com
Thoughts on Twitter's new Two-Factor Authentication
1–10 of 35 posts
Re: Thoughts on Twitter's new Two-Factor Authentication
#2Not sure why there are complaints about it only working when the phone is online. Twitter will only work with a phone online anyway.
Re: Thoughts on Twitter's new Two-Factor Authentication
#3Not sure why there are complaints about it only working when the phone is online. Twitter will only work with a phone online anyway.
It's possible to have computer Internet connectivity in an area with no cell phone reception. I go to a place like that about once a year at least, or so.
Re: Thoughts on Twitter's new Two-Factor Authentication
#4Would one possible solution be to show a random word on the screen and add that as part of the authentication request? This would allow it to pair up with what you currently see on the screen and keep it simple enough where IP address or other technical details aren't required to be known.
Re: Thoughts on Twitter's new Two-Factor Authentication
#5Not sure why there are complaints about it only working when the phone is online. Twitter will only work with a phone online anyway.
This would prevent you from using twitter on a PC when your phone does not have internet connectivity. I.E. someone at an internet cafe in a foreign country.
Re: Thoughts on Twitter's new Two-Factor Authentication
#6Would one possible solution be to show a random word on the screen and add that as part of the authentication request? This would allow it to pair up with what you currently see on the screen and keep it simple enough where IP address or other technical details aren't required to be known.
I like this idea, it's similar to what modern tablet and phones use for Bluetooth pairing: instead of asking to enter a number on the other device, they just ask you to check whether they match up.
Re: Thoughts on Twitter's new Two-Factor Authentication
#7Not sure why there are complaints about it only working when the phone is online. Twitter will only work with a phone online anyway.
It's possible to have computer Internet connectivity in an area with no cell phone reception. I go to a place like that about once a year at least, or so.
Maybe they are trying to tell you to stop tweeting about it, put down your phone and enjoy your vacation?
Re: Thoughts on Twitter's new Two-Factor Authentication
#8Neither TOTP (Google Authenticator) or Twitter factor in how easy it is to malware/root Android phones these days. I still prefer Yubikey or other opensource cards until the state of mobile security improves (for ex SEAndroid).
Re: Thoughts on Twitter's new Two-Factor Authentication
#9Earlier quoted context omitted.
It's possible to have computer Internet connectivity in an area with no cell phone reception. I go to a place like that about once a year at least, or so.
Maybe they are trying to tell you to stop tweeting about it, put down your phone and enjoy your vacation?
I appreciate the sentiment but let's be real, what problem did they solve exactly?
Re: Thoughts on Twitter's new Two-Factor Authentication
#10Earlier quoted context omitted.
It's possible to have computer Internet connectivity in an area with no cell phone reception. I go to a place like that about once a year at least, or so.
Maybe they are trying to tell you to stop tweeting about it, put down your phone and enjoy your vacation?
I don't think they can be, as I don't have a Twitter account.
Certainly I would be pissed beyond belief if I tried to login to my bank (assuming they ever pull their heads out of their asses to support 2FA) and couldn't because I don't have cellular service in addition to Internet.