|
The morons at my bank will text or call - but not use email.
If I'm planning on banking online they know I'm near an email capable device. I may not be anywhere near a phone. The US Treasury Direct site, which is amazingly fussy to maintain security, will email the one-time code. Same for a number of online banks - major financial institutions. I'm already voting with my wallet - moving my accounts to where they'll cooperate.
Another thing - authenticating BACK to me would be nice - a great way to avoid phishing attempts.
My particular version - for extra secure - requires a custom .exe to be run, which identifies unique machine information, encrypts it (with an every-changing key) and sends it for confirmation in the machine registry. If you don't go through the .exe you cannot access the 'working' parts of the website. Rephrased, for all practical purposes, without the local launcher on a registered machine you don't even get to the same website.
Nothing is 100% hack-proof, but a local item to authenticate registered machines makes it damn tough. Meanwhile, it's a single-click (once registered) - and the browser opens for user login. No burden on the user.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
How about testing if the user can tell an arse from an elbow?
There are websites with photos and invites the reader to guess whether it is an ass or an elbow.
StupidStuff.ORG - Ass Or Elbow Quiz
|
|
|
|
|
Two factor authentication is a PITA! F'rinstance I couldn't log on to my mobile phone supplier's web site to report that my phone was dead. They insisted on sending an SMS with a code. Der!!!
We're philosophical about power outages here. A.C. come, A.C. go.
|
|
|
|
|
We use yubikey as do many secure businesses (think DoD, GOv, etc.).
Little USB plug in (many sizes, we use one that virtually disappears into you device when inserted). All you do is enter a PIN to authenticate.
https://www.yubico.com/
|
|
|
|
|
No, no, please no! 2 Form factor has stopped me from doing anything at home... 
|
|
|
|
|
Just use the good old send some random words (or numbers) to the user's email account.
If that is not secure enough, then make sure the user apply with 2 email accounts, so that your service can send two sets of different random words (or numbers) to the user's two email accounts. Which may be as safe as a "2 factor authentication services". No fumbling with phone SMS / swipe here / swipe there, etc, etc.
And if that is not secure enough, then make sure the user apply with 3 emai ... ... ... ... 
|
|
|
|
|
AusCert recommends (for it's 2 factor auth services):
FreeOTP app, Authy, 1Password, etc but also has instructions for google authenticator. I'm using FreeOTP and it's currently working a treat.
|
|
|
|
|
Vegetable rights! People just don't seem to carrot all...
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Lettuce discuss this further.
|
|
|
|
|
Just Beet-ween us?
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Bring the whole garden as long as we can keep it peas-full.
|
|
|
|
|
There's not a lot of room - won't it be a bit of a squash?
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
That is a bit of a pickle, but Romaine calm!
|
|
|
|
|
That's a Little Gem of a comment - bound to Rocket to the top, Cos it's just so good!
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
|
What exactly do you bean?
|
|
|
|
|
OriginalGriff wrote: There's not a lot of room - won't it be a bit of a squash?
That's a fruit, not a veggie 
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
I fail to grassp some people.
"If we don't change direction, we'll end up where we're going"
|
|
|
|
|
Wouldn't "People Eating Tasty Vegetables" run afoul of the "Truth in Advertising" laws?
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
So you would prefer it the other way around huh? Your post makes me think of "The Day of the Triffids"!
"If we don't change direction, we'll end up where we're going"
|
|
|
|
|
<sarcasm>
Well, that would be one interpretation. Another would be that I don't think that vegetables are that tasty.
</sarcasm>
Or perhaps you didn't see the play on PETA => PETV.
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
Physical Exercise TeleVision? Never heard of it.
Sent from my Amstrad PC 1640
Never throw anything away, Griff
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
OriginalGriff wrote: Physical Exercise
It's probably called 'sports' in your neck of the woods...
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
This makes me think of an old song by Tool, "Disgustipated." During a spoken interlude they say,Quote: And I begged, "Angel of the Lord, what are these tortured screams?"
And the angel said unto me, "These are the cries of the carrots, the cries of the carrots!
You see, Reverend Maynard, tomorrow is harvest day and to them it is the holocaust."
And I sprang from my slumber drenched in sweat like the tears of one million terrified brothers and roared, "Hear me now, I have seen the light! They have a consciousness, they have a life, they have a soul! Damn you! Let the rabbits wear glasses! Save our brothers!"
Can I get an amen? Can I get a hallelujah? Thank you Jesus
|
|
|
|
|
Yes, I think I'll go cry a bowl full of cabbage for the poor vegetables.
CQ de W5ALT
Walt Fair, Jr., P. E.
Comport Computing
Specializing in Technical Engineering Software
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
